Exploit for Allocation of Resources Without Limits or Throttling in Redis

🗓️ 09 Sep 2026 08:37:53Reported by rubbxalcType

githubexploit🔗 github.com👁 10 Views

Unauthenticated DoS in Redis via oversized bulk string headers causing memory exhaustion.

Reporter	Title	Published	Views	Family All 181
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to various attacks due to its use of redis (CVE-2021-32675, CVE-2021-32626, CVE-2021-32672)	29 Jun 202214:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Redis affecting the IBM Event Streams UI	21 Dec 202117:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway: Update Redis to remediate two CVEs	17 May 202214:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Redis may affect IBM Robotic Process Automation for Cloud Pak	27 Jun 202319:31	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilities in Redis affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	22 Jun 202209:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Redis, OpenSSH, Golang Go, and Apache Kafka may affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and OpenShift	10 Dec 202121:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	6 Oct 202204:10	–	ibm
FreeBSD	redis -- multiple vulnerabilities	4 Oct 202100:00	–	freebsd
ATTACKERKB	CVE-2021-32675	4 Oct 202118:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : redis (ALASREDIS6-2023-007)	27 Sep 202300:00	–	nessus

09 Sep 2026 08:39Current

CVSS 25

CVSS 3.17.5

EPSS0.16904

Redis Denial of Service Memory exhaustion Pre-allocation Unauthenticated Out of Memory Bulk string