redisbloom vulnerabilities
1 known vulnerability in redisbloom from Redis. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.0average CVSS score
Latest first
- 7.0 High severity
RedisBloom: Buffer Copy without Checking Size of Input
RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, specially crafted `CF.LOADCHUNK` commands may be used by authenticated users to perform heap overflow, which may lead to remote co