Skip to content
OpenAdvisories

Package · Ubuntu

redis

54 known vulnerabilities.

4 results · Clear filters · Feed

  • Low 3.5

    Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated…

  • Low 3.1

    setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size - prev->used.

  • Low 3.6

    Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

    Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during…

  • Low 3.3

    A Malformed Lua script can crash Redis

    Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem i…