Skip to content
OpenAdvisories

Vendor

RedisTimeSeries

2 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.7

    RedisTimeSeries RESTORE invalid memory access may allow remote code execution

    RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RES…

  • High 7.0

    RedisTimeSeries Integer Overflow Remote Code Execution Vulnerability

    RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MREVRANGE by an authenticated user, using specially crafted command arguments may cause an integer overflow, a su…