CVE-2021-29469: Potential exponential regex in monitor mode

Reference Links

• https://github.com/NodeRedis/node-redis/commit/2d11b6dc9b9774464a91fb4b448bad8bf699629e
• https://github.com/NodeRedis/node-redis/releases/tag/v3.1.1
• https://github.com/NodeRedis/node-redis/security/advisories/GHSA-35q2-47q7-3pc3
• https://security.netapp.com/advisory/ntap-20210611-0010/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/200618
• https://www.ibm.com/support/pages/node/6564317 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6564317

Frequently Asked Questions

• What is CVE-2021-29469?

  CVE-2021-29469 is a denial of service vulnerability in the Node Redis redis module for Node.js.

• How does CVE-2021-29469 impact IBM Cognos Analytics 11.2.x?

  CVE-2021-29469 can cause a denial of service condition in IBM Cognos Analytics 11.2.x.

• Is CVE-2021-29469 a high severity vulnerability?

  Yes, CVE-2021-29469 has a severity value of 7.5, indicating a high severity.

• How can I fix CVE-2021-29469 in IBM Cognos Analytics 11.2.x?

  You can fix CVE-2021-29469 in IBM Cognos Analytics 11.2.x by applying the patch available at [link to patch].

• Where can I find more information about CVE-2021-29469?

  You can find more information about CVE-2021-29469 at [link to IBM X-Force exchange] and [link to IBM support page].