EUVD-2022-52768

Redis is an in-memory database that persists on disk. A specially crafted XAUTOCLAIM command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version...

CVE-2022-31144

Redis is an in-memory database that persists on disk. A specially crafted XAUTOCLAIM command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version...

This Week in Spring - July 19th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! This week Im trying to wind down some threads and take some vacation with my family. Its going to be an amazing time, indeed! But that doesnt stop the deluge of novelties and news in the wide world of Springdom, so weve got a...

Redis Labs Redis 缓冲区错误漏洞

Redis Labs Redis is an open source, network-enabled, memory-based, persistent logging, key-value Key-Value storage database written in ANSI C, with a multi-language API, from Redis Labs. A security vulnerability exists in Redis versions prior to 7.0.4, which stems from a specially crafted...

PT-2022-3806

Name of the Vulnerable Software and Affected Versions: Redis versions 7.0.0 through 7.0.3 Description: The issue is related to a heap overflow that can potentially lead to remote code execution. This occurs when a specially crafted XAUTOCLAIM command is executed on a stream key in a specific stat...

Fedora: Security Advisory for golang-github-ledisdb (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

FreeBSD : redis -- Potential remote code execution vulnerability (871d93f9-06aa-11ed-8d5f-080027f5fec9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 871d93f9-06aa-11ed-8d5f-080027f5fec9 advisory. - The Redis core team reports: A specially crafted XAUTOCLAIM command on a stream key in a specific sta...

Fedora: Security Advisory for golang-github-hashicorp-serf (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

redis -- Potential remote code execution vulnerability

The Redis core team reports: A specially crafted XAUTOCLAIM command on a stream key in a specific state may result with heap overflow, and potentially remote code execution...

[SECURITY] Fedora 35 Update: golang-github-hashicorp-serf-0.9.5-5.fc35

Serf is a decentralized solution for service discovery and orchestration that is lightweight, highly available, and fault tolerant. Serf runs on Linux, Mac OS X, and Windows. An efficient and lightweight gossip protocol is used to communicate with other nodes. Serf can detect node failur es and...

CVE-2022-33105

Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID...

CVE-2022-24736 affecting package redis 5.0.14-1

CVE-2022-24736 affecting package redis 5.0.14-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-24735 affecting package redis 5.0.14-1

CVE-2022-24735 affecting package redis 5.0.14-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] Fedora 36 Update: grafana-pcp-3.2.0-3.fc36

This Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries1 and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace1, as well as several dashboards...

Exploit for Missing Authorization in Redis

CVE-2022-0543 1. Introduction Redis Sandbox Escape Vulnera...

Important Photon OS Security Update - PHSA-2022-0207

Updates of 'curl', 'redis', 'openssl' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-4.0-0207

Updates of 'redis', 'curl', 'openssl' packages of Photon OS have been released...

[SECURITY] Fedora 36 Update: golang-github-ledisdb-0.6-5.20210112gitd35789e.fc36

Ledisdb is a high-performance NoSQL database library and server written in Go. It's similar to Redis but store data in disk. It supports many data structures including kv, list, hash, zset, set. LedisDB now supports multiple different databases as backends...

Redis 7.0 DoS Vulnerability

Redis is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...

Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to various attacks due to its use of redis (CVE-2021-32675, CVE-2021-32626, CVE-2021-32672)

Summary Redis is used by several components in IBM Cloud Pak for Multicloud Management Monitoring as an in-memory shared cache database. It is not exposed outside the cluster. Vulnerability Details CVEID: CVE-2021-32672 DESCRIPTION: Redis could allow a remote authenticated attacker to obtain...