The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5221-1 advisory.

    It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. A remote attacker     could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-32626)

    It was discovered that Redis incorrectly handled some malformed requests when using Redis Lua Debugger. A     remote attacker could possibly use this issue to cause a denial of service or other unspecified impact.
    This issue only affected Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2021-32672)

    It was discovered that Redis incorrectly handled certain Redis Standard Protocol (RESP) requests. A remote     attacker could possibly use this issue to cause a denial of service. (CVE-2021-32675)

    It was discovered that Redis incorrectly handled some configuration parameters with specially crafted     network payloads. A remote attacker could possibly use this issue to cause a denial of service or execute     arbitrary code. Vulnerabilities CVE-2021-32627 and CVE-2021-41099 only affected Ubuntu 18.04 ESM and     Ubuntu 20.04 ESM. (CVE-2021-32627, CVE-2021-32628, CVE-2021-32687, CVE-2021-41099).

    It was discovered that Redis incorrectly handled memory when processing certain input in 32-bit systems. A     remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. One     vulnerability (CVE-2021-32761) only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM and     another vulnerability (CVE-2021-21309) only affected Ubuntu 18.04 ESM. (CVE-2021-32761, CVE-2021-21309).

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Redis vulnerabilities (USN-5221-1)

high Nessus Plugin ID 183135

Version 1.3

Version 1.2

Version 1.1

Version 1.1

Version 1.0

Version 1.3 Aug 28, 2024, 7:43 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408281943
Version 1.2 Dec 22, 2023, 3:04 PM CVSSv2 score source (changed from "CVE-2021-21309" to "CVE-2021-32626") Plugin Feed: 202312221504
Version 1.1 Dec 15, 2023, 2:39 PM CVSSv2 score source (changed from "CVE-2021-32626" to "CVE-2021-21309") Plugin Feed: 202312151439
Version 1.1 Dec 22, 2023, 1:07 PM CVSSv2 score source (changed from "CVE-2021-21309" to "CVE-2021-32626") Plugin Feed: 202312221307
Version 1.0 Oct 16, 2023, 7:25 PM New Plugin Feed: 202310161925