Redis

55 results · Feed

• Medium 5.3
  CVE-2021-32672

  Vulnerability in Lua Debugger in Redis

  Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis w…

  Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  Oct 4, 2021
• High 7.5
  CVE-2021-32627

  Integer overflow issue with Streams in Redis

  Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default pr…

  Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  Oct 4, 2021
• High 7.5
  CVE-2021-32628 EPSS 13%

  Vulnerability in handling large ziplists

  Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability in…

  Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  Oct 4, 2021
• High 7.5
  CVE-2021-32626 EPSS 16%

  Lua scripts can overflow the heap-based Lua stack in Redis

  Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with hea…

  Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  Oct 4, 2021
• High 8.8
  CVE-2021-32765

  Integer Overflow to Buffer Overflow in Hiredis

  Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hi…

  Redis hiredis hiredis hiredis Debian Ubuntu
  Oct 4, 2021
• High 7.5
  CVE-2021-32761 EPSS 30%

  Integer overflow issues with *BIT commands on 32-bit systems

  Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with version 2.2 and prior to versions 5.0.13, 6.0.15, and 6.2.5. On 32-bit systems, Redis `*BIT*` comma…

  Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  Jul 21, 2021
• High 7.5
  CVE-2021-32625

  Redis vulnerability in STRALGO LCS on 32-bit systems

  Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer, could be exploited using the STRALGO LCS command to corrupt the heap and potentially …

  Redis Redis redis redis Debian Ubuntu Alpine
  Jun 2, 2021
• High 7.5
  CVE-2021-29478

  Vulnerability in the COPY command for large intsets

  Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis 6.2 before 6.2.3 could be exploited to corrupt the heap and potentially result with remote code execution. …

  Redis Redis redis Debian
  May 4, 2021
• High 7.5
  CVE-2021-29477

  Vulnerability in the STRALGO LCS command

  Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer could be exploited using the `STRALGO LCS` command to corrupt the heap and potentially…

  Redis Redis redis redis Debian Alpine
  May 4, 2021
• Medium 5.4
  CVE-2021-21309

  Integer overflow on 32-bit systems

  Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could be exploited to corrupt the heap and potentially result with remote code execution. Redis 4.0 o…

  Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  Feb 26, 2021
• Unscored —
  CVE-2013-0180

  Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds.

  Redis Redis redis Debian
  Nov 1, 2019
• Unscored —
  CVE-2013-0178

  Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm.

  Redis Redis redis Debian
  Nov 1, 2019
• High 7.2
  CVE-2019-10192 EPSS 26%

  A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x …

  Redis Redis redis redis Debian Ubuntu Alpine
  Jul 11, 2019
• High 7.2
  CVE-2019-10193 EPSS 23%

  A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x…

  Redis Redis redis redis Debian Alpine
  Jul 11, 2019
• Medium 6.6
  CVE-2016-8339 EPSS 15%

  A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out …

  Redis Redis redis Debian
  Oct 28, 2016