18 matches found
CVE-2026-56388
The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated attacker who can reach a bRPC server with Redis service enabled can send an empty array header followed by a bulk string, causing an out-of-bounds write in the parser and...
CVE-2026-54426
Uncontrolled recursion in the Redis reply parser in Apache bRPC 1.18.0 allows a remote Redis server peer to crash a bRPC Redis client process by returning a deeply nested RESP array reply. The parser recursed once for each nested array level without enforcing a depth limit. The fix adds a...
CVE-2026-56388 Apache bRPC: Out-of-Bounds Write in Redis Command Parser
The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated attacker who can reach a bRPC server with Redis service enabled can send an empty array header followed by a bulk string, causing an out-of-bounds write in the parser and...
CVE-2026-56388
The Apache bRPC Redis server command parser is vulnerable to an out-of-bounds write due to improper handling of RESP array counts. Specifically, RedisCommandParser::ConsumeImpl accepted zero as a count, resizing the command argument vector to zero elements. If an attacker sends an empty RESP arra...
EUVD-2026-107174
The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated attacker who can reach a bRPC server with Redis service enabled can send an empty array header followed by a bulk string, causing an out-of-bounds write in the parser and...
EUVD-2026-107170
Uncontrolled recursion in the Redis reply parser in Apache bRPC 1.18.0 allows a remote Redis server peer to crash a bRPC Redis client process by returning a deeply nested RESP array reply. The parser recursed once for each nested array level without enforcing a depth limit. The fix adds a...
CVE-2026-54426
Versions of Apache bRPC prior to 1.18.0 are vulnerable to a crash due to uncontrolled recursion in the Redis reply parser. A remote Redis server peer can trigger this by returning a deeply nested RESP array reply , causing the bRPC Redis client process to crash because the parser lacks a depth li...
CVE-2026-54426 Apache bRPC: Stack Exhaustion via Unbounded Recursion in Redis Reply Parser
Uncontrolled recursion in the Redis reply parser in Apache bRPC 1.18.0 allows a remote Redis server peer to crash a bRPC Redis client process by returning a deeply nested RESP array reply. The parser recursed once for each nested array level without enforcing a depth limit. The fix adds a...
PT-2026-120533
The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated attacker who can reach a bRPC server with Redis service enabled can send an empty array header followed by a bulk string, causing an out-of-bounds write in the parser and...
PT-2026-120529
Uncontrolled recursion in the Redis reply parser in Apache bRPC 1.18.0 allows a remote Redis server peer to crash a bRPC Redis client process by returning a deeply nested RESP array reply. The parser recursed once for each nested array level without enforcing a depth limit. The fix adds a...
Improper handling of exceptions in Apache bRPC
A security vulnerability exists in Apache bRPC versions prior to 1.18.0. It arises because the Redis service command parser accepts an empty RESP array as a command header. A remote unauthenticated attacker can send an empty array header along with subsequent bulk strings to a bRPC server running...
Apache bRPC resource management error vulnerability
Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises because the Redis reply parser fails to limit recursion depth; as a result, remote peers on the Redis server return deeply nested RESP array replies, potentially causing the bRPC...
Linux Distros Unpatched Vulnerability : CVE-2026-93572
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty's RedisArrayAggregator component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis RESP arra...
SUSE CVE-2026-93572
A flaw was found in Netty's RedisArrayAggregator component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis RESP array headers. This can cause the RedisArrayAggregator to eagerly preallocate a large amount of heap memory, leading to heap memory exhaustio...
CVE-2026-93572
A flaw was found in Netty's RedisArrayAggregator component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis RESP array headers. This can cause the RedisArrayAggregator to eagerly preallocate a large amount of heap memory, leading to heap memory exhaustio...
UBUNTU-CVE-2026-93572
A flaw was found in Netty's RedisArrayAggregator component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis RESP array headers. This can cause the RedisArrayAggregator to eagerly preallocate a large amount of heap memory, leading to heap memory exhaustio...
CVE-2026-93572
A flaw was found in Netty's "RedisArrayAggregator" component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis RESP array headers. This can cause the "RedisArrayAggregator" to eagerly preallocate a large amount of heap memory, leading to heap memory...
CVE-2026-93572: Allocation of Resources Without Limits or Throttling
A flaw was found in Netty's RedisArrayAggregator component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis RESP array headers. This can cause the RedisArrayAggregator to eagerly preallocate a large amount of heap memory, leading to heap memory exhaustio...