Redis 安全漏洞

Redis is an open source, ANSI C, network-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis, Inc. that provides APIs in multiple languages. A security vulnerability exists in Redis. The vulnerability can be exploited by an attacker to remotely execute code...

The vulnerability of the Redis database management system, related to buffer overflows in the stack, allows attackers to execute arbitrary code.

The vulnerability of the Redis database management system is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting a specially crafted Lua script remotely...

SUSE CVE-2024-31227

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users...

PT-2024-7758

Name of the Vulnerable Software and Affected Versions Redis versions prior to 7.2.6 and 7.4.1 Description The issue exists due to insufficient input validation in Redis, allowing a remote attacker to cause a denial of service. An authenticated user with sufficient privileges may create a malforme...

NI FlexLogger Redis Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of NI FlexLogger. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer...

Photon OS 3.0: Redis PHSA-2021-3.0-0320

An update of the redis package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0320. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Redis PHSA-2021-3.0-0316

An update of the redis package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0316. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-6121

An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service...

CVE-2024-6121 NI SystemLink Server Ships Out of Date Redis Version

An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service...

NI SystemLink Server 安全漏洞

NI SystemLink Server is an application soft from National Instruments NI Inc. that helps engineers implement cost-effective and locally managed test and measurement standardization, automation, and digitization tools. A security vulnerability exists in NI SystemLink Server version 2024 Q1 and...

PT-2025-1017

Name of the Vulnerable Software and Affected Versions Redis versions prior to 7.4.2 Redis versions prior to 7.2.7 Redis versions prior to 6.2.17 Description The issue is related to a use-after-free vulnerability in Redis, which can be exploited by manipulating the garbage collector using a...

Missing Default Authentication

Argo CD is vulnerable to Missing Default Authentication. The vulnerability is due to the default lack of password protection in redis, allowing attackers with access to an unprivileged pod to connect to the Redis server to gain read/write access, modify the "mfst" manifest key to execute...

BIT-REDIS-2023-31655

redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

The vulnerability of the Redis database management system, related to integer overflow, allows attackers to execute arbitrary code.

The vulnerability of the Redis database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2023-41056 Redis vulnerable to integer overflow in certain payloads

Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4...

PT-2023-6560

Name of the Vulnerable Software and Affected Versions Redis versions prior to 6.2.14 Redis versions prior to 7.0.14 Redis versions prior to 7.2.2 Description Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions ...

PT-2023-4954

Name of the Vulnerable Software and Affected Versions Redis versions 7.0 through 7.0.12 Redis versions 7.2 through 7.2.0 Description The issue is related to insecure privilege management in Redis, an in-memory database that persists on disk. It does not correctly identify keys accessed by the SOR...

PYSEC-2023-312

Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command specifically, a SET command. NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this...

PT-2023-6480

Name of the Vulnerable Software and Affected Versions Redis versions 2.6.0 through 6.0.19 Redis versions 6.2.0 through 6.2.12 Redis versions 7.0.0 through 7.0.11 Description A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, resulting in heap...

The vulnerability of the maloc function in the Redis database management system allows a attacker to cause a service failure.

The vulnerability of the maloc function in the Redis database management system is related to queue overflow when a distributed queue is used. This can lead to unauthorized writes outside of the bound process or errors in the process. Exploiting this vulnerability allows an attacker to cause...