Wind River Support Network

HomeDefectsLIN1023-8456
Fixed

LIN1023-8456 : Security Advisory - redis - CVE-2024-31227

Created: Oct 4, 2024    Updated: Nov 22, 2024
Resolved Date: Nov 21, 2024
Found In Version: 10.23.30.1
Fix Version: 10.23.30.14
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace

Description

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

https://nvd.nist.gov/vuln/detail/CVE-2024-31227

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube