Skip to content
OpenAdvisories
Medium DLA-3361-1 1 CVE

redis - security update

Published Mar 13, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 redis 5:5.0.14-1+deb10u3

Vulnerabilities 1

  • Medium 5.5
    CVE-2022-36021 EPSS 60%

    Redis string pattern matching can be abused to achieve Denial of Service

    Redis is an in-memory database that persists on disk. Authenticated users can use string matching commands (like `SCAN` or `KEYS`) with a specially crafted pattern to trigger a denial-of-service attack on Redis, causing it to hang and consume 100% CPU time. T…

    Redis Redis redis redis Debian Ubuntu Azure Linux