Skip to content
OpenAdvisories

Package · Ubuntu

redis

54 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High 7.7
    CVE-2026-25243 Public exploit

    redis-server RESTORE invalid memory access may allow remote code execution

    Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that tr…

    Redis Redis redis redis Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2026-23631 Public exploit

    redis-server Lua use-after-free may allow remote code execution

    Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or c…

    Redis Redis redis redis Debian Ubuntu Alpine
  • High 7.7
    CVE-2026-23479 Public exploit

    redis-server use-after-free in unblock client flow may allow remote code execution

    Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flo…

    Redis Redis redis redis Debian Ubuntu Alpine
  • Critical 10.0
    CVE-2025-49844 Public exploit EPSS 83%

    Redis Lua Use-After-Free may lead to remote code execution

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code exe…

    Redis Redis redis redis Debian Ubuntu Alpine
  • Medium 6.3
    CVE-2025-46819 Public exploit

    Redis is vulnerable to DoS via specially crafted LUA scripts

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in…

    Redis Redis redis redis Debian Ubuntu Alpine
  • Medium 6.0
    CVE-2025-46818 Public exploit

    Redis: Authenticated users can execute LUA scripts as a different user

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user…

    Redis Redis redis redis Debian Ubuntu Alpine
  • High 7.0
    CVE-2025-32023 Public exploit

    Redis allows out of bounds writes in hyperloglog commands leading to RCE

    Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially…

    Redis Redis redis redis Debian Ubuntu Alpine
  • High 7.0
    CVE-2024-46981 Public exploit

    Redis' Lua library commands may lead to remote code execution

    Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17…

    Redis Redis redis redis Debian Ubuntu Alpine
  • High 7.0
    CVE-2024-31449 Public exploit

    Lua library commands may lead to stack overflow and RCE in Redis

    Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in a…

    Redis Redis redis redis Debian Ubuntu Alpine
  • High 7.0
    CVE-2022-24834 Public exploit EPSS 41%

    Heap overflow issue with the Lua cjson library used by Redis

    Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions…

    Redis Redis redis redis Debian Ubuntu Alpine
  • Critical 10.0
    CVE-2022-0543 Exploited Public exploit EPSS 99%

    It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specifi…

    Debian redis redis redis Debian Ubuntu
    KEV Mar 28, 2022
  • High 7.5
    CVE-2021-32675 Public exploit EPSS 16%

    DoS vulnerability in Redis

    Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RESP) request, Redis allocates memory according to user-specified values which determine the number of elements (in the multi-bulk header) and…

    Redis Redis redis redis Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-11218 Public exploit EPSS 59%

    Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10…

    redis redis redis Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-12326 Public exploit

    Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution…

    redis redis Debian Ubuntu