Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ps://lists.apache.org/thread.html/rb523bb6c60196c5f58514b86a8585c2069a4852039b45de3818b29d2%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/r57245853c7245baab09eae08728c52b58fd77666538092389cc3e882%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/r490ca5611c150d193b320a2608209180713b7c68e501b67b0cffb925%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/r6d32fc3cd547f7c9a288a57c7f525f5d00a00d5d163613e0d10a23ef%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/rdb4db3f5a9c478ca52a7b164680b88877a5a9c174e7047676c006b2c%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.or
b4db3f5a9c478ca52a7b164680b88877a5a9c174e7047676c006b2c%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/r8db1d7b3b9acc9e8d2776395e280eb9615dd7790e1da8c57039963de%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r2e93ce23e04c3f0a61e987d1111d0695cb668ac4ec4edbf237bd3e80%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/rc73b8dd01b1be276d06bdf07883ecd93fe1a01f139a99ef30ba4308c%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/rd25c88aad0e76240dd09f0eb34bdab924933946429e068a167adcb73%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/rcfc154eb2de23d2dc
933946429e068a167adcb73%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/rcfc154eb2de23d2dc08a56100341161e1a40a8ea86c693735437e8f2%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/ra96c74c37ed7252f78392e1ad16442bd16ae72a4d6c8db50dd55c88b%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/r04a3e0d9f53421fb946c60cc54762b7151dc692eb4e39970a7579052%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/racc191a1f70a4f13155e8002c61bddef2870b26441971c697436ad5d%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/rf87b870a22aa5c77c27900967b518a71a7d954c2952860fce3794
.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/rf87b870a22aa5c77c27900967b518a71a7d954c2952860fce3794b60%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/r16c4b55ac82be72f28adad4f8061477e5f978199d5725691dcc82c24%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/rae198f44c3f7ac5264045e6ba976be1703cff38dcf1609916e50210d%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/re4f70b62843e92163fab03b65e2aa8078693293a0c36f1cc260079ed%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/reafc834062486adfc7be5bb8f7b7793be0d33f483678a094c3f9d468%40%3Ccommits.servicecomb.apache.
/lists.apache.org/thread.html/reafc834062486adfc7be5bb8f7b7793be0d33f483678a094c3f9d468%40%3Ccommits.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/r8bcaf7821247b1836b10f6a1a3a3212b06272fd4cde4a859de1b78cf%40%3Ccommits.servicecomb.apache.org%3E
CVE ID: CVE-2021-21296 State: PUBLISHED Published: 2021-02-10T20:00:19 Last Updated: 2024-08-03T18:09:15.667Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: fleetdm Products: fleet Problem Types: CWE-400 Description: Fleet is an open source osquery manager. In Fleet before version 3.7.0 a malicious actor with a valid node key can send a badly formatted request that causes the Fleet server to exit, resulting in denial of service. This is possible only while a live query is currently ongoing. We believe the impact of this vulnerability to be low given the requirement that the actor has a valid node key. There is no information disclosure, privilege escalation, o
w given the requirement that the actor has a valid node key. There is no information disclosure, privilege escalation, or code execution. The issue is fixed in Fleet 3.7.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fleetdm/fleet/security/advisories/GHSA-xwh8-9p3f-3x45 - https://www.npmjs.com/package/fleetctl - https://github.com/fleetdm/fleet/commit/f68f4238e83b45b2164e4ed05df14af0f06eaf40
CVE ID: CVE-2021-21297 State: PUBLISHED Published: 2021-02-26T16:20:17 Last Updated: 2024-08-03T18:09:15.688Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: node-red Products: node-red Problem Types: CWE-1321, CWE-915 Description: Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier contains a Prototype Pollution vulnerability in the admin API. A badly formed request can modify the prototype of the default JavaScript Object with the potential to affect the default behaviour of the Node-RED runtime. The vulnerability is patched in the 1.2.8 release. A workaround is to ensure only authorized users are a
de-RED runtime. The vulnerability is patched in the 1.2.8 release. A workaround is to ensure only authorized users are able to access the editor url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/node-red/node-red/security/advisories/GHSA-xp9c-82x8-7f67 - https://www.npmjs.com/package/%40node-red/runtime - https://www.npmjs.com/package/%40node-red/editor-api - https://github.com/node-red/node-red/releases/tag/1.2.8
CVE ID: CVE-2021-21298 State: PUBLISHED Published: 2021-02-26T16:25:14 Last Updated: 2024-08-03T18:09:15.856Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: node-red Products: node-red Problem Types: CWE-22 Description: Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier has a vulnerability which allows arbitrary path traversal via the Projects API. If the Projects feature is enabled, a user with `projects.read` permission is able to access any file via the Projects API. The issue has been patched in Node-RED 1.2.8. The vulnerability applies only to the Projects feature which is not enabled by default
s been patched in Node-RED 1.2.8. The vulnerability applies only to the Projects feature which is not enabled by default in Node-RED. The primary workaround is not give untrusted users read access to the Node-RED editor. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/%40node-red/runtime - https://github.com/node-red/node-red/releases/tag/1.2.8 - https://github.com/node-red/node-red/security/advisories/GHSA-m33v-338h-4v9f - https://github.com/node-red/node-red/commit/74db3e17d075f23d9c95d7871586cf461524c456
CVE ID: CVE-2021-21299 State: PUBLISHED Published: 2021-02-11T18:00:18 Last Updated: 2024-08-03T18:09:15.660Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: hyperium Products: hyper Problem Types: CWE-444 Description: hyper is an open-source HTTP library for Rust (crates.io). In hyper from version 0.12.0 and before versions 0.13.10 and 0.14.3 there is a vulnerability that can enable a request smuggling attack. The HTTP server code had a flaw that incorrectly understands some requests with multiple transfer-encoding headers to have a chunked payload, when it should have been rejected as illegal. This combined with an upstream HTTP proxy that understands the
d payload, when it should have been rejected as illegal. This combined with an upstream HTTP proxy that understands the request payload boundary differently can result in "request smuggling" or "desync attacks". To determine if vulnerable, all these things must be true: 1) Using hyper as an HTTP server (the client is not affected), 2) Using HTTP/1.1 (HTTP/2 does not use transfer-encoding), 3) Using a vulnerable HTTP proxy upstream to hyper. If an upstream proxy correctly rejects the illegal transfer-encoding headers, the desync attack cannot succeed. If there is no proxy upstream of hyper, hyper cannot start the desync attack, as the client will repair the headers before forwarding. This is
stream of hyper, hyper cannot start the desync attack, as the client will repair the headers before forwarding. This is fixed in versions 0.14.3 and 0.13.10. As a workaround one can take the following options: 1) Reject requests that contain a `transfer-encoding` header, 2) Ensure any upstream proxy handles `transfer-encoding` correctly. Additional Analyst Notes: - CVE Program Container: References: - https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn - https://rustsec.org/advisories/RUSTSEC-2021-0020.html - https://github.com/hyperium/hyper/security/advisories/GHSA-6hfq-h8hq-87mf - https://crates.io/crates/hyper - https://github.com/hyperium/hyper/commit/8f93123ef
ity/advisories/GHSA-6hfq-h8hq-87mf - https://crates.io/crates/hyper - https://github.com/hyperium/hyper/commit/8f93123efef5c1361086688fe4f34c83c89cec02
CVE ID: CVE-2021-21300 State: PUBLISHED Published: 2021-03-09T00:00:00 Last Updated: 2024-08-03T18:09:15.850Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: git Products: git Problem Types: CWE-59 Description: Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive file system such as NTFS, HFS+ or APFS (i.e. the default file systems on Windows and macOS). Note that clean/smudge filters have to be configured for that. Git for
. the default file systems on Windows and macOS). Note that clean/smudge filters have to be configured for that. Git for Windows configures Git LFS by default, and is therefore vulnerable. The problem has been patched in the versions published on Tuesday, March 9th, 2021. As a workaound, if symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. Likewise, if no clean/smudge filters such as Git LFS are configured globally (i.e. _before_ cloning), the attack is foiled. As always, it is best to avoid cloning repositories from untrusted sources. The earliest impacted version is 2.14.2. The fix versions are: 2.30.1, 2.29.3, 2
ng repositories from untrusted sources. The earliest impacted version is 2.14.2. The fix versions are: 2.30.1, 2.29.3, 2.28.1, 2.27.1, 2.26.3, 2.25.5, 2.24.4, 2.23.4, 2.22.5, 2.21.4, 2.20.5, 2.19.6, 2.18.5, 2.17.62.17.6. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/git/git/security/advisories/GHSA-8prw-h3cq-mghm - https://lore.kernel.org/git/xmqqim6019yd.fsf%40gitster.c.googlers.com/ - https://git-scm.com/docs/git-config#Documentation/git-config.txt-coresymlinks - https://git-scm.com/docs/gitattributes#_filter - https://github.com/git/git/commit/684dd4c2b414bcf648505e74498a608f28de4592 - http://www.openwall.com/lists/oss-security/2021/03/09/3 - https://
git/commit/684dd4c2b414bcf648505e74498a608f28de4592 - http://www.openwall.com/lists/oss-security/2021/03/09/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCLJJLKKMS5WRFO6C475AOUZTWQLIARX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMXX2POK5X576BSDWSXGU7EIK6I72ERU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBPNGLQSYJHLZZ37BO42YY6S5OTIF4L4/ - https://support.apple.com/kb/HT212320 - http://seclists.org/fulldisclosure/2021/Apr/60 - https://security.gentoo.org/glsa/202104-01 - http://packetstormsecurity.com/files/163978/Git-LFS-Clo
osure/2021/Apr/60 - https://security.gentoo.org/glsa/202104-01 - http://packetstormsecurity.com/files/163978/Git-LFS-Clone-Command-Execution.html - https://lists.debian.org/debian-lts-announce/2022/10/msg00014.html
CVE ID: CVE-2021-21301 State: PUBLISHED Published: 2021-02-11T18:05:19 Last Updated: 2024-08-03T18:09:15.618Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: wireapp Products: wire-ios Problem Types: CWE-200 Description: Wire is an open-source collaboration platform. In Wire for iOS (iPhone and iPad) before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the call when the user believes it is disabled. It impacts all users in video calls. This is fixed in version 3.75. Additional Analyst Notes: - CVE Progra
is disabled. It impacts all users in video calls. This is fixed in version 3.75. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wireapp/wire-ios/security/advisories/GHSA-7fg4-x8vj-qvxf - https://github.com/wireapp/wire-ios/pull/4879 - https://github.com/wireapp/wire-ios/commit/7e3c30120066c9b10e50cc0d20012d0849c33a40
CVE ID: CVE-2021-21302 State: PUBLISHED Published: 2021-02-26T19:45:16 Last Updated: 2024-08-03T18:09:15.156Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: PrestaShop Products: PrestaShop Problem Types: CWE-78 Description: PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using shop search keywords via the admin panel. The problem is fixed in 1.7.7.2 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-2rw4-2p99-cmx9 - https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.7.2 -
hop/PrestaShop/security/advisories/GHSA-2rw4-2p99-cmx9 - https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.7.2 - https://github.com/PrestaShop/PrestaShop/commit/782b1368aa4e94dafe28f57485bffbd8893fbb1e
CVE ID: CVE-2021-21303 State: PUBLISHED Published: 2021-02-05T21:40:14 Last Updated: 2024-08-03T18:09:15.134Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: helm Products: helm Problem Types: CWE-74 Description: Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. In Helm from version 3.0 and before version 3.5.2, there a few cases where data loaded from potentially untrusted sources was not properly sanitized. When a SemVer in the `version` field of a chart is invalid, in some cases Helm allows the string to be used "as is" without
n a SemVer in the `version` field of a chart is invalid, in some cases Helm allows the string to be used "as is" without sanitizing. Helm fails to properly sanitized some fields present on Helm repository `index.yaml` files. Helm does not properly sanitized some fields in the `plugin.yaml` file for plugins In some cases, Helm does not properly sanitize the fields in the `Chart.yaml` file. By exploiting these attack vectors, core maintainers were able to send deceptive information to a terminal screen running the `helm` command, as well as obscure or alter information on the screen. In some cases, we could send codes that terminals used to execute higher-order logic, like clearing a terminal
screen. In some cases, we could send codes that terminals used to execute higher-order logic, like clearing a terminal screen. Further, during evaluation, the Helm maintainers discovered a few other fields that were not properly sanitized when read out of repository index files. This fix remedies all such cases, and once again enforces SemVer2 policies on version fields. All users of the Helm 3 should upgrade to the fixed version 3.5.2 or later. Those who use Helm as a library should verify that they either sanitize this data on their own, or use the proper Helm API calls to sanitize the data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/helm/helm/secu
to sanitize the data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/helm/helm/security/advisories/GHSA-c38g-469g-cmgx - https://github.com/helm/helm/commit/6ce9ba60b73013857e2e7c73d3f86ed70bc1ac9a - https://github.com/helm/helm/releases/tag/v3.5.2
CVE ID: CVE-2021-21304 State: PUBLISHED Published: 2021-02-08T17:40:17 Last Updated: 2024-08-03T18:09:15.762Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: dynamoose Products: dynamoose Problem Types: CWE-915, CWE-1321 Description: Dynamoose is an open-source modeling tool for Amazon's DynamoDB. In Dynamoose from version 2.0.0 and before version 2.7.0 there was a prototype pollution vulnerability in the internal utility method "lib/utils/object/set.ts". This method is used throughout the codebase for various operations throughout Dynamoose. We have not seen any evidence of this vulnerability being exploited. There is no evidence this vulnerability impacts ve
We have not seen any evidence of this vulnerability being exploited. There is no evidence this vulnerability impacts versions 1.x.x since the vulnerable method was added as part of the v2 rewrite. This vulnerability also impacts v2.x.x beta/alpha versions. Version 2.7.0 includes a patch for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dynamoose/dynamoose/security/advisories/GHSA-rrqm-p222-8ph2 - https://github.com/dynamoose/dynamoose/commit/324c62b4709204955931a187362f8999805b1d8e - https://github.com/dynamoose/dynamoose/releases/tag/v2.7.0 - https://www.npmjs.com/package/dynamoose
CVE ID: CVE-2021-21305 State: PUBLISHED Published: 2021-02-08T19:20:14 Last Updated: 2024-08-03T18:09:15.001Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: carrierwaveuploader Products: carrierwave Problem Types: CWE-74 Description: CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1, there is a code injection vulnerability. The "#manipulate!" method inappropriately evals the content of mutation option(:read/:write), allowing attackers to craft a string that can be executed as a Ruby code. If an application developer supplies untrusted inputs to
tackers to craft a string that can be executed as a Ruby code. If an application developer supplies untrusted inputs to the option, it will lead to remote code execution(RCE). This is fixed in versions 1.3.2 and 2.1.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md#132---2021-02-08 - https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md#211---2021-02-08 - https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-cf3w-g86h-35x4 - https://rubygems.org/gems/carrierwave - https://github.com/carrierwaveuploader/carrierwave/commit/387116f5c72efa42bc3938d946b4c8d2f22
ems.org/gems/carrierwave - https://github.com/carrierwaveuploader/carrierwave/commit/387116f5c72efa42bc3938d946b4c8d2f22181b7
CVE ID: CVE-2021-21306 State: PUBLISHED Published: 2021-02-08T21:20:18 Last Updated: 2024-08-03T18:09:15.882Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: markedjs Products: marked Problem Types: CWE-400 Description: Marked is an open-source markdown parser and compiler (npm package "marked"). In marked from version 1.1.1 and before version 2.0.0, there is a Regular expression Denial of Service vulnerability. This vulnerability can affect anyone who runs user generated code through marked. This vulnerability is fixed in version 2.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/markedjs/marked/security/advisories/GH
ditional Analyst Notes: - CVE Program Container: References: - https://github.com/markedjs/marked/security/advisories/GHSA-4r62-v4vq-hr96 - https://github.com/markedjs/marked/issues/1927 - https://github.com/markedjs/marked/pull/1864 - https://github.com/markedjs/marked/commit/7293251c438e3ee968970f7609f1a27f9007bccd - https://www.npmjs.com/package/marked
CVE ID: CVE-2021-21307 State: PUBLISHED Published: 2021-02-11T18:20:21 Last Updated: 2024-08-03T18:09:15.162Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: lucee Products: Lucee Problem Types: CWE-862 Description: Lucee Server is a dynamic, Java based (JSR-223), tag and scripting language used for rapid web application development. In Lucee Admin before versions 5.3.7.47, 5.3.6.68 or 5.3.5.96 there is an unauthenticated remote code exploit. This is fixed in versions 5.3.7.47, 5.3.6.68 or 5.3.5.96. As a workaround, one can block access to the Lucee Administrator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lucee/Lucee/s
e Lucee Administrator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lucee/Lucee/security/advisories/GHSA-2xvv-723c-8p7r - https://github.com/lucee/Lucee/commit/6208ab7c44c61d26c79e0b0af10382899f57e1ca - https://dev.lucee.org/t/lucee-vulnerability-alert-november-2020/7643 - https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md - https://portswigger.net/daily-swig/security-researchers-earn-50k-after-exposing-critical-flaw-in-apple-travel-portal - http://ciacfug.org/blog/updating-lucee-as-part-of-a-vulnerability-alert-response - http://packetstormsecurity.com/files/163864/Lucee-Administrator-imgProcess.cfm-Arbitrary-File-Write.html
CVE ID: CVE-2021-21308 State: PUBLISHED Published: 2021-02-26T19:50:14 Last Updated: 2024-08-03T18:09:15.260Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: PrestaShop Products: PrestaShop Problem Types: CWE-287 Description: PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes customer commands. The problem is fixed in 1.7.7.2 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.7.2 - https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-
thub.com/PrestaShop/PrestaShop/releases/tag/1.7.7.2 - https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-557h-hf3c-whcg - https://github.com/PrestaShop/PrestaShop/commit/2f673bd93e313f08c35e74decc105f40dc0b7dee
CVE ID: CVE-2021-21309 State: PUBLISHED Published: 2021-02-26T21:50:16 Last Updated: 2024-08-03T18:09:15.320Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L) Vendors: redis Products: redis Problem Types: CWE-190 Description: Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could be exploited to corrupt the heap and potentially result with remote code execution. Redis 4.0 or newer uses a configurable limit for the maximum supported bulk input size. By default, it is 512MB which is a safe value for all platforms. If the limit is significantly increased, receivin
size. By default, it is 512MB which is a safe value for all platforms. If the limit is significantly increased, receiving a large request from a client may trigger several integer overflow scenarios, which would result with buffer overflow and heap corruption. We believe this could in certain conditions be exploited for remote code execution. By default, authenticated Redis users have access to all configuration parameters and can therefore use the “CONFIG SET proto-max-bulk-len” to change the safe default, making the system vulnerable. **This problem only affects 32-bit Redis (on a 32-bit system, or as a 32-bit executable running on a 64-bit system).** The problem is fixed in version 6.2, a