CVE-2013-7458
Fixed in a distro release EPSS <1%
linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.
Products: redislabs redis, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | redis | 2:3.2.1-4 |
| Debian 13 | redis | 2:3.2.1-4 |
| Debian 14 | redis | 2:3.2.1-4 |
| Debian 7 | redis | 2:2.4.14-1+deb7u1 |
| Debian 8 | redis | 2:2.8.17-1+deb8u5 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | redis | 6.0.8-1.3.1 |
| SUSE Package Hub 12 | redis | 3.0.7-6.1 |
| Ubuntu 14.04 LTS | redis | 2:2.8.4-2ubuntu0.2 |
| Ubuntu 16.04 LTS | redis | 2:3.0.6-1ubuntu0.2 |
| openSUSE Tumbleweed | redis | 3.2.4-1.1 |