redis: Malformed Lua script can crash Redis

A flaw was found in the Redis database when a malformed Lua script can cause a NULL pointer dereference. This flaw allows an attacker to load a crafting script, which results in a crash of the redis-server process...

redis: Code injection via Lua script execution environment

A flaw was found in the Redis database where Lua scripts can be manipulated to overcome ACL rules. This flaw allows an attacker with access to Redis to inject Lua code that executes the potentially higher privileges of another Redis user...

Low: Red Hat Security Advisory: redis:6 security, bug fix, and enhancement update

An update for the redis:6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

redis:6 security, bug fix, and enhancement update

An update is available for redis. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Redis is an advanced key-value store. It is often referred to as a data-structu...

RLSA-2022:7541 Low: redis:6 security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

CVE-2022-31144

A heap-based buffer overflow flaw was found in Redis within the XAUTOCLAIM command implementation. This flaw allows an attacker to craft the XAUTOCLAIM command with malicious data on a stream key in a specific state that triggers a heap-based buffer overflow, possibly enabling remote code executi...

Redis <= 7.0.5 DoS Vulnerability

Redis is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...

Low: redis:6 security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

RHEL 8 : redis:6 (RHSA-2022:7541)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7541 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets...

ALSA-2022:7541 Low: redis:6 security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

Low Photon OS Security Update - PHSA-2022-3.0-0483

Updates of 'redis' packages of Photon OS have been released...

Amazon Linux 2022 : redis6, redis6-devel (ALAS2022-2022-199)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-199 advisory. A flaw was found in the Redis database where Lua scripts can be manipulated to overcome ACL rules. This flaw allows an attacker with access to Redis to inject Lua code that executes the...

Important Photon OS Security Update - PHSA-2022-0536

Updates of 'redis' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-0276

Updates of 'redis' packages of Photon OS have been released...

Low Photon OS Security Update - PHSA-2022-4.0-0276

Updates of 'redis' packages of Photon OS have been released...

CVE-2022-3647 affecting package redis for versions less than 6.2.7-2

CVE-2022-3647 affecting package redis for versions less than 6.2.7-2. A patched version of the package is available...

CVE-2022-3647 affecting package redis 6.2.12-1

CVE-2022-3647 affecting package redis 6.2.12-1. A patched version of the package is available...

The vulnerability of the dbghelp.dll library in the Redis database management system allows a perpetrator to execute arbitrary code.

The vulnerability of the dbghelp.dll library in the Redis database management system is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

hiredis, hiredis-py: Multiple Vulnerabilities

Background hiredis is a minimalistic C client library for the Redis database. hiredis-py is a Python extension that wraps hiredis. Description Hiredis is vulnerable to integer overflow if provided maliciously crafted or corrupted RESP mult-bulk protocol data. When parsing multi-bulk array-like...

GLSA-202210-32 : hiredis, hiredis-py: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-32 hiredis, hiredis-py: Multiple Vulnerabilities - Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupt...