CVE-2025-32023
🗓️ 07 Jul 2025 15:22:19Reported by GitHub_MType 
cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 461 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 251 |
|---|---|---|---|---|
 | Security Bulletin: Due to the use of Redis, IBM DataPower Gateway is vulnerable to a denial of service | 23 Oct 202520:56 | – | ibm |
 | Exploit for CVE-2025-32023 | 6 Jul 202518:09 | – | githubexploit |
| Exploit for CVE-2025-32023 | 9 Jul 202521:34 | – | githubexploit |
 | Amazon Linux 2023 : redis6, redis6-devel (ALAS2023-2025-1066) | 10 Jul 202500:00 | – | nessus |
| Amazon Linux 2023 : valkey, valkey-devel (ALAS2023-2025-1067) | 10 Jul 202500:00 | – | nessus |
| Amazon Linux 2 : redis (ALASREDIS6-2025-013) | 10 Jul 202500:00 | – | nessus |
| Alibaba Cloud Linux 3 : 0125: redis:6 (ALINUX3-SA-2025:0125) | 6 Aug 202500:00 | – | nessus |
| AlmaLinux 10 : valkey (ALSA-2025:11401) | 9 Oct 202500:00 | – | nessus |
| AlmaLinux 8 : redis:6 (ALSA-2025:12006) | 30 Jul 202500:00 | – | nessus |
| AlmaLinux 9 : redis:7 (ALSA-2025:12008) | 30 Jul 202500:00 | – | nessus |
10
[
{
"vendor": "redis",
"product": "redis",
"versions": [
{
"version": ">= 8.0.0, < 8.0.3",
"status": "affected"
},
{
"version": ">= 7.4-rc1, < 7.4.5",
"status": "affected"
},
{
"version": ">= 7.0.0, < 7.2.10",
"status": "affected"
},
{
"version": ">= 2.8.0, < 6.2.19",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| REDIS_KEY | request body | pfcount | Trigger a stack/heap out of bounds write by performing a HyperLogLog merge operation (pfcount) on a key containing a malformed HLL payload. | CWE-680 |
| REDIS_KEY | request body | set | Write a malformed HyperLogLog payload to a key, which can be used to trigger an out-of-bounds write during subsequent HLL operations. | CWE-680 |
| hll_payload | request body | set | Write a malformed HyperLogLog payload to a key, which can be used to trigger an out-of-bounds write during subsequent HLL operations. | CWE-680 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 09:11Current
6.7Medium risk
Vulners AI Score6.7
CVSS 3.17 - 7.8
EPSS0.06473
SSVC