Lucene search
K

13 matches found

SUSE CVE
SUSE CVE
added 2026/05/07 2:22 a.m.3 views

SUSE CVE-2026-25589

RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...

7.5CVSS6.2AI score0.00267EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/07 12:0 a.m.5 views

PT-2026-38478

RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...

8.8CVSS6.2AI score0.00267EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/06 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-25589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized...

8.8CVSS6.3AI score0.00267EPSS
Exploits0References2
NVD
NVD
added 2026/05/05 5:17 p.m.2 views

CVE-2026-25589

RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...

8.8CVSS0.00267EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2026/05/05 5:17 p.m.0 views

CVE-2026-25589

RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...

8.8CVSS6.2AI score0.00267EPSS
Exploits0References1
CVE
CVE
added 2026/05/05 4:50 p.m.22 views

CVE-2026-25589

RedisBloom module for Redis is affected. In versions before 2.8.20, RESTORE may process crafted serialized values without validation, leading to invalid memory access and potential remote code execution when an authenticated user can run RESTORE on a server with RedisBloom loaded. The issue stems...

8.8CVSS6.2AI score0.00267EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/05/05 4:50 p.m.2 views

EUVD-2026-27414

RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...

7.7CVSS6.2AI score0.00267EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/05 4:50 p.m.25 views

CVE-2026-25589 RedisBloom RESTORE invalid memory access may allow remote code execution

RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...

7.7CVSS0.00267EPSS
Exploits0References2
Packet Storm News
Packet Storm News
added 2025/05/28 12:0 a.m.4 views

RedisBloom 2.6.12 Integer Overflow

There is an integer overflow vulnerability in RedisBloom version 2.6.12, which is a module used in redis. The integer overflow vulnerability allows an attacker a redis client which knows the password to allocate memory in the heap lesser than the required memory due to wraparound. Then read and...

8.8CVSS7.2AI score0.13111EPSS
Exploits1
OSV
OSV
added 2025/01/08 3:38 p.m.2 views

CVE-2024-55656 RedisBloom Integer Overflow Remote Code Execution Vulnerability

RedisBloom adds a set of probabilistic data structures to Redis. There is an integer overflow vulnerability in RedisBloom, which is a module used in Redis. The integer overflow vulnerability allows an attacker a redis client which knows the password to allocate memory in the heap lesser than the...

8.8CVSS7AI score0.13111EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/01/08 12:0 a.m.1 views

RedisBloom 输入验证错误漏洞

RedisBloom is a library from the RedisBloom open source. Adds a set of probabilistic data structures to Redis. RedisBloom suffers from an input validation error vulnerability that stems from the presence of an integer overflow vulnerability that allows an attacker to allocate less than the requir...

8.8CVSS4.3AI score0.13111EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/07/18 12:0 a.m.3 views

PT-2025-3137 · Redis · Redisbloom

Name of the Vulnerable Software and Affected Versions: RedisBloom versions prior to 2.2.19 RedisBloom versions prior to 2.4.12 RedisBloom versions prior to 2.6.14 RedisBloom versions prior to 2.8.2 Description: There is an integer overflow vulnerability in RedisBloom, a module used in Redis. This...

9CVSS7.8AI score0.80733EPSS
Exploits2References11
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.2 views

PT-2024-20757 · Redis · Redisbloom

Name of the Vulnerable Software and Affected Versions: RedisBloom versions 2.0.0 through 2.4.6 RedisBloom versions 2.6.0 through 2.6.9 Description: RedisBloom adds a set of probabilistic data structures to Redis. Specially crafted CF.LOADCHUNK commands may be used by authenticated users to perfor...

7CVSS8AI score0.02019EPSS
Exploits0References5
Rows per page
Query Builder