Skip to content
OpenAdvisories
Low RHSA-2022:7541 2 CVEs

Red Hat Security Advisory: redis:6 security, bug fix, and enhancement update

Published Oct 22, 2024 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream redis 0:6.2.7-1.module+el8.7.0+15197+cc495aeb
Red Hat · RHEL 8 enterprise_linux:8::appstream redis-debuginfo 0:6.2.7-1.module+el8.7.0+15197+cc495aeb
Red Hat · RHEL 8 enterprise_linux:8::appstream redis-debugsource 0:6.2.7-1.module+el8.7.0+15197+cc495aeb
Red Hat · RHEL 8 enterprise_linux:8::appstream redis-devel 0:6.2.7-1.module+el8.7.0+15197+cc495aeb
Red Hat · RHEL 8 enterprise_linux:8::appstream redis-doc 0:6.2.7-1.module+el8.7.0+15197+cc495aeb

Vulnerabilities 2

  • Low 3.9
    CVE-2022-24735

    Lua scripts can be manipulated to overcome ACL rules in Redis

    Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior to version 7.0.0 or 6.2.7 can inject Lua code that will execute with the (potentially higher) privil…

    Redis Redis redis redis Debian Azure Linux Alpine
  • Low 3.3
    CVE-2022-24736

    A Malformed Lua script can crash Redis

    Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem i…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1999873
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2080286
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2080289
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7541.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-24735
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24735
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24735
  • article
    https://github.com/redis/redis/security/advisories/GHSA-647m-2wmq-qmvq
  • report
    https://access.redhat.com/security/cve/CVE-2022-24736
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24736
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24736
  • article
    https://github.com/redis/redis/security/advisories/GHSA-3qpw-7686-5984