Canary
Monthly
Denial of service in the Thinkst Canary honeypot's optional Redis service can be triggered by unauthenticated remote attackers when that service is enabled, causing limited availability impact to the Redis service without confidentiality or integrity loss. The Canary is not affected if Redis is disabled, and the high attack-complexity score reflects that the trigger requires specific conditions rather than a reliable full-appliance outage. Thinkst has addressed the issue across supported platforms and published a patched Docker image, with automatic updates already in distribution; no public exploit identified at time of analysis.
Denial of service in the Thinkst Canary honeypot's optional Redis service can be triggered by unauthenticated remote attackers when that service is enabled, causing limited availability impact to the Redis service without confidentiality or integrity loss. The Canary is not affected if Redis is disabled, and the high attack-complexity score reflects that the trigger requires specific conditions rather than a reliable full-appliance outage. Thinkst has addressed the issue across supported platforms and published a patched Docker image, with automatic updates already in distribution; no public exploit identified at time of analysis.