Skip to content
OpenAdvisories
Medium DLA-3973-1 2 CVEs

redis - security update

Published Nov 28, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 redis 5:6.0.16-1+deb11u4

Vulnerabilities 2

  • Medium 5.5
    CVE-2022-35977 EPSS 14%

    Integer overflow in certain command arguments can drive Redis to OOM panic

    Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SETRANGE` and `SORT(_RO)` commands can trigger an integer overflow, resulting with Redis attempting to allocate impossible amounts of memory and abort with an…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  • Medium 5.5
    CVE-2024-31228

    Denial-of-service due to unbounded pattern matching in Redis

    Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`, `PSUBSCRIBE`, `FUNCTION LIST`, `COMMAND…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine