Vulnerabilities > CVE-2020-35668 - NULL Pointer Dereference vulnerability in Redislabs Redisgraph

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

redislabs

CWE-476

NVD

Published: 2020-12-23

Updated: 2020-12-28

Summary

RedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference that leads to a server crash because it mishandles an unquoted string, such as an alias that has not yet been introduced.

Vulnerable Configurations

Part	Description	Count
Application	Redislabs Redislabs Redisgraph 2.0.0 Redislabs Redisgraph 2.0.1 Redislabs Redisgraph 2.0.2 Redislabs Redisgraph 2.0.3 Redislabs Redisgraph 2.0.4 Redislabs Redisgraph 2.0.5 Redislabs Redisgraph 2.0.6 Redislabs Redisgraph 2.0.7 Redislabs Redisgraph 2.0.8 Redislabs Redisgraph 2.0.9 Redislabs Redisgraph 2.0.10 Redislabs Redisgraph 2.0.11 Redislabs Redisgraph 2.0.12 Redislabs Redisgraph 2.0.13 Redislabs Redisgraph 2.0.14 Redislabs Redisgraph 2.0.15 Redislabs Redisgraph 2.0.16 Redislabs Redisgraph 2.0.17 Redislabs Redisgraph 2.0.18 Redislabs Redisgraph 2.0.19 Redislabs Redisgraph 2.0.20 Redislabs Redisgraph 2.0.21 Redislabs Redisgraph 2.2.0 Redislabs Redisgraph 2.2.1 Redislabs Redisgraph 2.2.2 Redislabs Redisgraph 2.2.3 Redislabs Redisgraph 2.2.4 Redislabs Redisgraph 2.2.5 Redislabs Redisgraph 2.2.6 Redislabs Redisgraph 2.2.7 Redislabs Redisgraph 2.2.8 Redislabs Redisgraph 2.2.9 Redislabs Redisgraph 2.2.10	34

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References