Vulnerabilidades do Apache Software Foundation Kvrocks
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Apache Software Foundation Kvrocks: 7 registro(s), com versões afetadas e correções.cpe:2.3:a:apache:kvrocks
CVE-2026-54226
Média · 6.4
CWE-190 25/06/2026
Apache Kvrocks: RESTORE IntSet Integer Overflow Leads to Remote DoS
A vulnerability in Apache Kvrocks.
This issue affects Apache Kvrocks: from 2.6.0 through 2.15.0.
Users are recommended to upgrade to version 2.16.0, which fixes the issue.
CVE-2026-46752
Crítica · 10.0
CWE-122 25/06/2026
Apache Kvrocks: estouro de heap na biblioteca cjson do Lua
Estouro de heap (HEAP overflow) no Lua do Redis, na biblioteca cjson, vulnerabilidade no Apache Kvrocks.
Esta questão afeta Apache Kvrocks: de 2.0.4 até 2.15.0.
Recomenda-se que os usuários façam upgrade para a versão 2.16.0, que corrige o problema.
CVE-2026-46751
Média · 5.5
25/06/2026
Apache Kvrocks: Does not remove the unsafe loadstring function from its Lua sandbox, allowing a user who can run EVAL scripts to load crafted, unvalidated bytecode that crashes the server process, resulting in a remote denial of service.
A vulnerability in Apache Kvrocks.
This issue affects Apache Kvrocks: from 2.2.0 through 2.15.0.
Users are recommended to upgrade to version 2.16.0, which fixes the issue.
CVE-2026-45188
Baixa · 2.4
CWE-23 25/06/2026
Apache Kvrocks: Replication Fullsync Path Traversal via Unvalidated Filename Handling
Relative Path Traversal vulnerability in Apache Kvrocks.
This issue affects Apache Kvrocks: from 1.0.0 through 2.15.0.
Users are recommended to upgrade to version 2.16.0, which fixes the issue.
CVE-2026-41566
Crítica · 9.4
CWE-280 25/06/2026
Apache Kvrocks: vulnerabilidade de tratamento inadequado de permissões insuficientes (CVE-2026-41566)
Vulnerabilidade de Tratamento Inadequado de Permissões Insuficientes ou Privilégios em Apache Kvrocks.
Esse problema afeta o Apache Kvrocks: 2.8.0.
Recomenda-se que os usuários atualizem para a versão 2.16.0, que corrige o problema.
CVE-2025-59792
Média · 5.3
CWE-312 28/11/2025
Apache Kvrocks: MONITOR command reveals plaintext credentials to non-admins
Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks.
This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0.
Users are recommended to upgrade to version 2.14.0, which fixes the issue.
CVE-2025-59790
Média · 5.4
CWE-269 28/11/2025
Apache Kvrocks: RESET command grants admin privileges
Improper Privilege Management vulnerability in Apache Kvrocks.
This issue affects Apache Kvrocks: from v2.9.0 through v2.13.0.
Users are recommended to upgrade to version 2.14.0, which fixes the issue.