Description
Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| redis | redis | >= 7.0.0, < 7.0.12 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | redis | 5:7.0.12-1 | — |
| Debian 13 | redis | 5:7.0.12-1 | — |
| Debian 12 | redis | 5:7.0.15-1~deb12u1 | DSA-5610-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | redis7 | 7.0.8-150500.3.3.1 | SUSE-SU-2023:2925-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | redis | 7.0.12-1.1 | openSUSE-SU-2024:13047-1 |
| openSUSE Leap 15.5 | redis7 | 7.0.8-150500.3.3.1 | SUSE-SU-2023:2925-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | redis | 7.0.12-r0 | — |
| Alpine v3.23 | redis | 7.0.12-r0 | — |
| Alpine v3.22 | redis | 7.0.12-r0 | — |
| Alpine v3.21 | redis | 7.0.12-r0 | — |
| Alpine v3.20 | redis | 7.0.12-r0 | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | redis | 7.0.12-r0 | — |
| Alpine v3.18 | redis | 7.0.12-r0 | — |
| Alpine v3.17 | redis | 7.0.12-r0 | — |
| Alpine v3.16 | redis | 7.0.12-r0 | — |
Advisories 4
- WID-SEC-2023-1698 Redis: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Apr 13, 2026
- DSA-5610-1 redis - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2023:2925-1 Security update for redis7 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13047-1 redis-7.0.12-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://github.com/redis/redis/security/advisories/GHSA-4cfx-h9gq-xpx3
- https://github.com/redis/redis/releases/tag/7.0.12
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TDNNH2ONMVNBQ6LUIAOAGDNFPKXNST5K/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MIF5MAGYARYUMRFK7PQI7HYXMK2HZE5T/
- https://security.netapp.com/advisory/ntap-20230814-0009/