CVE-2021-29469 in Node-redisالمعلومات

الملخص

بحسب MITRE • 24/04/2021

Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings. This issue could lead to a denial of service. The issue is patched in version 3.1.1.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

مسؤول

GitHub, Inc.

حجز

30/03/2021

إفشاء

24/04/2021

الاعتدال

تمت الموافقة

إدخال

VDB-173850

EPSS

0.00926

KEV

لا

النشاطات

منخفض جدًا

المصادر

Want to stay up to date on a daily basis?

Enable the mail alert feature now!