REDHAT-BUG-894659
First published: Sat Jan 12 2013(Updated: )
It seems that redis 2.4 use a predictible file name in /tmp/ as some kind of swap file : server.vm_swap_file = zstrdup("/tmp/redis-%p.vm"); this was removed in 2.6 ( deprecated code ), but 2.4 is in fedora 18 and epel 6 AFAIK. Since redis do not care if the file exist or not before opening it ( and in fact, I think it try to reuse if it already exist ), this could be used by a attacker to erase a arbitrary file with a symlink to the file. Depending if redis is running as root or not, this could be dangerous, or just a minor nuisance.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ioredis |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/antirez/redis/commit/697af434fbeb2e3ba2ba9687cd283ed1a2734fa5
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=894659#c5
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=895120
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=895121
- http://www.openwall.com/lists/oss-security/2013/01/14/3
- http://www.openwall.com/lists/oss-security/2013/01/14/7
- https://access.redhat.com/security/cve/CVE-2013-0178
- https://access.redhat.com/security/cve/CVE-2013-0180
- https://bugzilla.redhat.com/show_bug.cgi?id=894659
Frequently Asked Questions
What is the severity of REDHAT-BUG-894659?
The severity of REDHAT-BUG-894659 is moderate, as the predictable file name in /tmp/ can lead to potential security risks.
How do I fix REDHAT-BUG-894659?
To fix REDHAT-BUG-894659, it is recommended to upgrade Redis to version 2.6 or later, where this issue has been resolved.
Which versions of Redis are affected by REDHAT-BUG-894659?
REDHAT-BUG-894659 affects Redis version 2.4 and earlier, as the predictable swap file issue was addressed in version 2.6.
Can the predictable swap file issue in REDHAT-BUG-894659 lead to data loss?
Yes, the predictable swap file issue in REDHAT-BUG-894659 can potentially lead to data loss or corruption if multiple instances of Redis are running on the same server.
Is REDHAT-BUG-894659 a common vulnerability?
Yes, REDHAT-BUG-894659 is a recognized vulnerability in older versions of Redis and is particularly noted in Fedora 18 and EPEL 6.
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2013-0178
- agent/severity
- agent/references
- agent/last-modified-date
- agent/first-publish-date
- agent/type
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/redis
- canonical/ioredis