Redis 安全漏洞

Redis is the United States Redis company's set of open-source use of ANSI C written to support the network , can be based on memory can also be a persistent log-type , key-value Key-Value storage database , and provides a variety of languages API. Redis has a security vulnerability that can be...

FreeBSD : redis,valkey -- {redis,valkey}-check-aof may lead to stack overflow and potential RCE (4ea9cbc3-5b28-11f0-b507-000c295725e4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4ea9cbc3-5b28-11f0-b507-000c295725e4 advisory. Simcha Kosman & CyberArk Labs reports: A user can run the redis,valkeyu-check-aof cli and pass a long...

The vulnerability of the Redis database management system server allows a hacker to execute arbitrary code.

The vulnerability of the Redis database management system is related to a numerical overflow in the buffer when executing commands that use the HyperLogLog algorithm. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted HLL command...

Exploit for CVE-2025-32023

CVE-2025-32023 PoC & Exploit for CVE-2025-32023 GHSA-rp2m-q...

PT-2025-28183

Name of the Vulnerable Software and Affected Versions: Redis versions 2.8 through 8.0.3, 7.4.5, 7.2.10, and 6.2.19. Valkey versions up to 8.1.3 and 8.0.4 are also affected. Description: Redis and Valkey are vulnerable to a heap-based buffer overflow in the HyperLogLog functionality. An...

PT-2025-28132

Name of the Vulnerable Software and Affected Versions: Redis versions prior to 8.0.3 Redis versions prior to 7.4.5 Redis versions prior to 7.2.10 Redis versions prior to 6.2.19 Description: The issue is related to an unauthenticated connection that can cause repeated IP protocol errors, leading t...

redis-8.0.2-1.1 on GA media (moderate)

redis-8.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:15293-1 Rating: moderate Cross-References: CVE-2024-31227 CVE-2024-31228 CVE-2024-31449 CVE-2024-46981 CVE-2024-51741 CVE-2025-21605 CVE-2025-27151 CVSS scores: CVE-2024-31227 SUSE : 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H...

openSUSE Security Advisory (SUSE-SU-2025:02190-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:15293-1 redis-8.0.2-1.1 on GA media

These are all security issues fixed in the redis-8.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 / openSUSE 15 Security Update : redis (SUSE-SU-2025:02190-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02190-1 advisory. - CVE-2025-27151: Absence of filename size check may cause a stack overflow bsc1243804 Tenable has extracted the preceding...

Security update for redis

This update for redis fixes the following issues: CVE-2025-27151: Absence of filename size check may cause a stack overflow bsc1243804 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run...

SUSE-SU-2025:02190-1 Security update for redis

This update for redis fixes the following issues: - CVE-2025-27151: Absence of filename size check may cause a stack overflow bsc1243804...

SUSE SLES15 Security Update : redis (SUSE-SU-2025:02010-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02010-1 advisory. - CVE-2025-21605: output buffer denial of service bsc1241708. Tenable has extracted the preceding description block directly from the SUSE...

CLSA-2025-1750785864 redis: Fix of CVE-2025-21605

CVE-2025-21605: add output buffer limiting for unauthenticated clients...

SUSE: Security Advisory (SUSE-SU-2025:02010-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for redis

This update for redis fixes the following issues: CVE-2025-21605: output buffer denial of service bsc1241708. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for yo...

SUSE-SU-2025:02010-1 Security update for redis

This update for redis fixes the following issues: - CVE-2025-21605: output buffer denial of service bsc1241708...

TencentOS Server 4: redis (TSSA-2024:0037)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0037 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 4: pcp (TSSA-2024:0788)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0788 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

szluyu99 gin-vue-blog 安全漏洞

szluyu99 gin-vue-blog is a Golang full-stack blog by Zhenyu personal developer, supporting Docker Compose one-click deployment. Based on the latest front-end and back-end technology stack Vue3, TS, Unocs, Redis and so on. The front-end contains a blog post display front , blog background manageme...