Skip to content
OpenAdvisories

Archive

18 October 2023

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Low 3.6

    Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

    Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during…