CVE-2013-0180 Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds.
MediumCVSS 5.5
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/redis(Debian:12) | < 2:2.6.7-1 | 2:2.6.7-1 |
| debian/redis(Debian:13) | < 2:2.6.7-1 | 2:2.6.7-1 |
| debian/redis(Debian:14) | < 2:2.6.7-1 | 2:2.6.7-1 |
| redislabs redis | = 2.6.0 | No fix listed |
| Redis Labs Redis | = 2.6 | No fix listed |
References
- Debian Security Tracker CVE-2013-0180 vendor-advisory
- [oss-security] 20130114 Re: CVE Request -- redis: Two insecure temporary file use flaws mailing-list third-party-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory