Database

In Redis versions prior to 6.2.16, 7.2.6 and 7.4.1 a medium severity vulnerability CVE-2024-31228 was detected. Authenticated users can trigger a denial-of-service in Redis by using specially crafted long string match patterns on certain commands, leading to stack overflow and a process crash. To fix this problem, users should upgrade to versions 6.2.16, 7.2.6 and 7.4.1. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-31228.

In SQLite version 0.1.1 a critical severity vulnerability CVE-2024-46488 was detected. This vulnerability allows attackers to trigger a heap buffer overflow using a specially crafted file, potentially causing a system Denial of Service (DoS). To fix this issue, users should upgrade SQLite to version 0.1.3. For more details, visit https://nvd.nist.gov/vuln/detail/cve-2024-46488.

In pgAdmin versions 8.11 and earlier a critical severity vulnerability in OAuth2 authentication CVE-2024-9014 was detected. This vulnerability allows attackers to potentially obtain the client ID and secret, leading to unauthorized access to user data. Currently there is no fix version for that issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-9014.

In Couchbase versions 7.6.x prior to 7.6.2, 7.2.x prior to 7.2.6 a medium severity vulnerability CVE-2024-25673 was detected. This vulnerability allows attackers to perform HTTP Host header injection, potentially leading to redirecting requests to malicious sites or influencing server-side logic based on manipulated host headers. Such attacks could compromise the integrity and security of the server. To fix this issue, users should upgrade Couchbase to versions 7.6.2, 7.2.6, or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-25673.

In PostgreSQL versions before 16.4, 15.8, 14.13, 13.16, 12.20 a high severity vulnerability CVE-2024-7348 was detected. This vulnerability allows attackers to execute SQL functions as a superuser by exploiting a race condition, swapping an object with a view or foreign table during the backup process. To fix this problem, users should upgrade to version 16.4.0. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-7348.

In MySQL Server product of Oracle MySQL versions 8.0.38, 8.4.1, 9.0.0 a medium severity vulnerability CVE-2024-21185 was detected. This vulnerability lets high-privileged attackers cause MySQL Server to crash or hang, leading to a denial of service. At the moment, there is no version where this vulnerability has been fixed. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-21185.

In MySQL Server versions 8.4.0 and prior a medium severity vulnerability CVE-2024-21176 was detected. This vulnerability allows attackers with low privileges and network access via multiple protocols to cause a hang or repeatedly crash the MySQL Server, resulting in a complete denial of service. To fix this issue, users should upgrade to version 8.4.0. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-21176.

In MongoDB Server versions from 6.0 to 6.0.3 a medium severity vulnerability CVE-2024-8654 was detected. This vulnerability allows attackers to exploit uninitialized memory in MongoDB, potentially causing the server to behave unexpectedly or crash. To fix this problem, users should upgrade MongoDB Server to version 6.0.4. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-8654.

In MongoDB Server versions 5.0 prior to 5.0.14 and 6.0 prior to 6.0.3 a medium severity vulnerability CVE-2024-8207 was detected. This vulnerability allows attackers with access to the server to take control of the MongoDB process by loading malicious files when it starts. To fix this problem, users should upgrade MongoDB Server to versions 6.1.1, 5.0.14, and 6.0.3. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-8207.