Exploit for Use After Free in Redis

CVE-2025-49844 - Redis Lua Interpreter Exploit !yuri08loveel...

PT-2025-41485

Name of the Vulnerable Software and Affected Versions Redis Enterprise affected versions not specified Description An elevation of privilege issue exists in Redis Enterprise. Successful exploitation could allow an attacker to gain elevated privileges. Recommendations At the moment, there is no...

AlmaLinux 10 : valkey (ALSA-2025:11401)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11401 advisory. redis: Redis Stack Buffer Overflow CVE-2025-27151 redis: Redis Unauthenticated Denial of Service CVE-2025-48367 redis: Redis Hyperloglog Out-of-Bounds...

Oracle Linux 8 : redis (ELSA-2025-20656)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20656 advisory. 6.2.9-1.0.2 - Fix for CVE-2025-49844 Orabug: 38515582 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

DLA-4325-1 redis - security update

Bulletin has no description...

Microsoft Azure Cache for Redis Enterprise 授权问题漏洞

Microsoft Azure Cache for Redis Enterprise is an in-memory caching service from Microsoft Corporation, USA. An elevation of privilege vulnerability exists in Microsoft Azure Cache for Redis Enterprise, which can be exploited by an attacker to gain elevated privileges on the system...

KLA89197 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Entra ID can be exploited remotely to gain privilege...

Debian: Security Advisory (DSA-6020-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4325 : redis - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4325 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4325-1 [email protected]...

Security update for redis7

This update for redis7 fixes the following issues: CVE-2025-49844: Malicious Lua scripts may lead to remote code execution. bsc1250995 CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and potential remote code execution. bsc1250995 CVE-2025-46818: Malicious Lua scripts can be...

Use After Free

Redis is vulnerable to a Use-after-free in. The vulnerability is due to improper memory handling in the Lua garbage collector due to crafted Lua scripts, and attackers can exploit this by executing malicious EVAL or EVALSHA commands...

Security update for redis7

This update for redis7 fixes the following issues: CVE-2025-49844: Malicious Lua scripts may lead to remote code execution. bsc1250995 CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and potential remote code execution. bsc1250995 CVE-2025-46818: Malicious Lua scripts can be...

SUSE-SU-2025:03500-1 Security update for redis7

This update for redis7 fixes the following issues: - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution. bsc1250995 - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and potential remote code execution. bsc1250995 - CVE-2025-46818: Malicious Lua scripts can...

[SECURITY] [DSA 6020-1] redis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6020-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 08, 2025 https://www.debian.org/security/faq -...

CVE-2025-49844 affecting package redis for versions less than 6.2.20-1

CVE-2025-49844 affecting package redis for versions less than 6.2.20-1. An upgraded version of the package is available that resolves this issue...

Exploit for Use After Free in Redis

CVE-2025-49844 RediShell - Lab Environment A practical lab...

Vulnerabilities fixed in Redis

Redis has fixed vulnerabilities in versions 8.2.1 and below. The vulnerabilities are in Redis' Lua scripting engine, which can be exploited by authenticated users. This can lead to remote code execution, out-of-bounds data access or server crashes. The vulnerabilities could compromise the integri...

BIT-VALKEY-2025-46819 Redis is vulnerable to DoS via specially crafted LUA scripts

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua...

BIT-VALKEY-2025-46818 Redis: Authenticated users can execute LUA scripts as a different user

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions o...

BIT-VALKEY-2025-46817 Lua library commands may lead to integer overflow and potential RCE

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...