Wind River Support Network

HomeDefectsLIN1021-6057
Fixed

LIN1021-6057 : Security Advisory - redis - CVE-2021-31294

Created: Jul 19, 2023    Updated: Jul 25, 2023
Resolved Date: Jul 25, 2023
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command). NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this.

CREATE(Triage):(User=admin) CVE-2021-31294 (https://nvd.nist.gov/vuln/detail/CVE-2021-31294)
Live chat
Online