Skip to content
OpenAdvisories

Product · Redis

Redis Software (Enterprise)

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.1

    Redis TLS pending-data list use-after-free

    Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the pri…