Index: security/vuxml/vuln.xml =================================================================== --- security/vuxml/vuln.xml (revision 423460) +++ security/vuxml/vuln.xml (working copy) @@ -58,6 +58,40 @@ * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> + + redis -- sensitive information leak through command history file + + + redis + 3.2.3 + + + redis-devel + 3.2.3 + + + + +

Redis team reports:

+
the redis-cli history file (in linenoise) is created with the + default OS umask value which makes it world readable in most systems + and could potentially expose authentication credentials to other + users.
+

+ + + + https://github.com/antirez/redis/pull/1418 + https://github.com/antirez/redis/issues/3284 + CVE-2013-7458 + + + 2013-11-30 + 2016-10-07 + + + BIND -- Remote Denial of Service vulnerability