Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | redis | 5:5.0.14-1+deb10u5 |
Vulnerabilities 1
-
Low 3.6
Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.
Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during…