Astra Linux – vulnerability in Redis

Redis is an in-memory database that persists data to disk. Authenticated users can issue a HRANDFIELD or ZRANDMEMBER command with specially crafted arguments to trigger a denial-of-service by crashing Redis due to an assertion failure. This issue affects Redis versions 6.2 and later up to, but no...

Redis Integer Overflow DoS

The vulnerability of the Redis database management system is related to integer overflow. Exploiting this vulnerability can allow an attacker to trigger a service failure using the commands HRANDFIELD and ZRANDMEMBE...

Redis Memory Buffer Overflow DoS

The vulnerability of the Redis database management system is related to a full overflow of the memory buffer. Exploiting this vulnerability can allow an attacker to cause a service failure using commands such as SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD...

PT-2023-2028

Name of the Vulnerable Software and Affected Versions Redis versions prior to 6.0.18 Redis versions prior to 6.2.11 Redis versions prior to 7.0.9 Description The issue is related to an integer overflow that can be triggered by authenticated users issuing specially crafted commands, including...