13 matches found
Oracle Linux 9 : ELSA-2026-64807-0: / valkey (ELSA-2026-648070)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648070 advisory. 8.0.10-1 - Rebase to 8.0.10 for CVE-2026-56684 CVE-2026-63639 CVE-2026-66373 in redis Tenable has extracted the preceding description block directly...
valkey security, bug fix, and enhancement update
8.0.10-1 - Rebase to 8.0.10 for CVE-2026-56684 CVE-2026-63639 CVE-2026-66373 in redis...
valkey security, bug fix, and enhancement update
8.0.11-1 - Rebase to 8.0.11 for CVE-2026-56684 CVE-2026-63639 CVE-2026-66373 in redis...
BELL-CVE-2026-56684
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2026-56684
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while...
UBUNTU-CVE-2026-56684
Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...
CVE-2026-56684
creationtimestamp| type| source ---|---|--- 2026-08-18 14:52:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hymfdqmzkz53z...
CVE-2026-56684 Valkey: TLS pending-data processing use-after-free may allow remote code execution
Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...
SUSE-SU-2026:3427-1 Security update for valkey
This update for valkey fixes the following issues: - CVE-2026-56684: use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL bsc1272443. - CVE-2026-63639: corrupt stream RDB files containing a shared NACK across consume...
Security update for valkey
This update for valkey fixes the following issues: CVE-2026-56684: use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL bsc1272443. CVE-2026-63639: corrupt stream RDB files containing a shared NACK across consumers c...
Fedora 44 : valkey (2026-3d18a65cc4)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3d18a65cc4 advisory. Valkey 9.0.5 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible...
valkey-9.1.1-1.1 on GA media (moderate)
valkey-9.1.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11381-1 Rating: moderate Cross-References: CVE-2026-56684 CVE-2026-63639 CVSS scores: CVE-2026-56684 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-63639 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affect...
