AZL-6849 CVE-2021-32687 affecting package redis for versions less than 6.2.6-1

🗓️ 04 Oct 2021 18:15:08Reported by GoogleType

osv

osv🔗 osv.dev

Redis CVE-2021-32687 causes heap overflow via set-max-intset-entries; fix in 6.2.6, 6.0.16, 5.0.14; ACL can block CONFIG SET.

Reporter	Title	Published	Views	Family All 175
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Redis affecting the IBM Event Streams UI	21 Dec 202117:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Redis may affect IBM Robotic Process Automation for Cloud Pak	27 Jun 202319:31	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilities in Redis affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	22 Jun 202209:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Redis, OpenSSH, Golang Go, and Apache Kafka may affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and OpenShift	10 Dec 202121:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	6 Oct 202204:10	–	ibm
FreeBSD	redis -- multiple vulnerabilities	4 Oct 202100:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : redis (ALASREDIS6-2023-006)	27 Sep 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0157: redis:6 (ALINUX3-SA-2023:0157)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : redis:5 (CESA-2021:3918)	28 Oct 202100:00	–	nessus
Tenable Nessus	CentOS 8 : redis:6 (CESA-2021:3945)	21 Oct 202100:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-32687

21 Apr 2026 04:38Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

EPSS0.01154

redis cve 2021 32687 heap overflow remote code execution set-max-intset-entries access control list block config set