The vulnerability of NoSQL Redis database management systems, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.

Integer overflow in Redis buffers lets attackers access data, compromise integrity, and trigger service failures.

Reporter	Title	Published	Views	Family All 71
FreeBSD	redis -- Integer overflow on 32-bit systems	22 Feb 202100:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Redis may affect IBM Robotic Process Automation for Cloud Pak	27 Jun 202319:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	6 Oct 202204:10	–	ibm
ATTACKERKB	CVE-2021-21309	26 Feb 202122:15	–	attackerkb
AlpineLinux	CVE-2021-21309	26 Feb 202121:50	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in Redis	19 Jun 202611:10	–	astralinux
CBLMariner	CVE-2021-21309 affecting package redis 5.0.5-7	6 Apr 202123:50	–	cbl_mariner
CBLMariner	CVE-2021-21309 affecting package redis for versions less than 5.0.5-7	9 Apr 202206:51	–	cbl_mariner
Circl	CVE-2021-21309	27 Feb 202100:39	–	circl
CNNVD	Redis Labs Redis Input Validation Error Vulnerability	26 Feb 202100:00	–	cnnvd

Vulners

Node

redis_labs redisRange4.0–5.0.11

redis_labs redisRange6.0.0–6.0.11

Source	Link
github	www.github.com/redis/redis/security/advisories/GHSA-hgj8-vff2-7cjf
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21309
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20230412SE16MD
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20230525SE16MD
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.1/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

10 Dec 2024 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 38.8

CVSS 29

EPSS0.047