Skip to content
OpenAdvisories
High DSA-5969-1 3 CVEs

redis - security update

Published Jul 31, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 12 redis 5:7.0.15-1~deb12u5

Vulnerabilities 3

  • High 7.5
    CVE-2025-48367

    Redis DoS Vulnerability due to bad connection error handling

    Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  • High 7.0
    CVE-2025-32023 Public exploit

    Redis allows out of bounds writes in hyperloglog commands leading to RCE

    Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  • Medium 4.7
    CVE-2025-27151

    redis-check-aof may lead to stack overflow and potential RCE

    Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlen(filepath) when copying a user-supplied file path i…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine