Skip to content
OpenAdvisories
Low DLA-3627-1 1 CVE

redis - security update

Published Oct 23, 2023 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 redis 5:5.0.14-1+deb10u5

Vulnerabilities 1

  • Low 3.6

    Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

    Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during…