Skip to content
OpenAdvisories
High RHSA-2025:11401 3 CVEs

Red Hat Security Advisory: valkey security update

Published Jul 21, 2025 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.0 valkey 0:8.0.4-1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 valkey-debuginfo 0:8.0.4-1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 valkey-debugsource 0:8.0.4-1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 valkey-devel 0:8.0.4-1.el10_0

Vulnerabilities 3

  • High 7.5
    CVE-2025-48367

    Redis DoS Vulnerability due to bad connection error handling

    Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  • High 7.0
    CVE-2025-32023 Public exploit

    Redis allows out of bounds writes in hyperloglog commands leading to RCE

    Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  • Medium 4.7
    CVE-2025-27151

    redis-check-aof may lead to stack overflow and potential RCE

    Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlen(filepath) when copying a user-supplied file path i…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2369153
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2376857
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2376858
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11401.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-27151
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-27151
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-27151
  • article
    https://github.com/redis/redis/commit/643b5db235cb82508e72f11c7b4bbfc7dc39be56
  • article
    https://github.com/redis/redis/releases/tag/8.0.2
  • article
    https://github.com/redis/redis/security/advisories/GHSA-5453-q98w-cmvm
  • article
    https://github.com/valkey-io/valkey/releases
  • report
    https://access.redhat.com/security/cve/CVE-2025-32023
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-32023
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-32023
  • article
    https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445
  • article
    https://github.com/redis/redis/releases/tag/6.2.19
  • article
    https://github.com/redis/redis/releases/tag/7.2.10
  • article
    https://github.com/redis/redis/releases/tag/7.4.5
  • article
    https://github.com/redis/redis/releases/tag/8.0.3
  • article
    https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43
  • report
    https://access.redhat.com/security/cve/CVE-2025-48367
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-48367
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-48367
  • article
    https://github.com/redis/redis/commit/bde62951accfc4bb0a516276fd0b4b307e140ce2
  • article
    https://github.com/redis/redis/security/advisories/GHSA-4q32-c38c-pwgq