Lucene search
K

7 matches found

Tenable Nessus
Tenable Nessus
added 2026/02/11 12:0 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: redis (UTSA-2026-005345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005345 advisory. Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read...

7.1CVSS7.4AI score0.08765EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2025/10/23 8:28 p.m.2 views

redis: Lua library commands may lead to integer overflow and potential RCE

An integer overflow present in the Redis Lua scripting engine that allows an authenticated client to submit a specially crafted Lua script for example via EVAL/EVALSHA that can trigger memory corruption and potentially lead to remote code execution within the Redis server process...

8.8CVSS8AI score0.10506EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2025/10/03 7:27 p.m.2 views

CVE-2025-49844 Redis Lua Use-After-Free may lead to remote code execution

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all...

9.9CVSS7.2AI score0.11111EPSS
Exploits13References3
EUVD
EUVD
added 2025/10/03 6:38 p.m.2 views

EUVD-2025-32328

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions o...

6CVSS6AI score0.03652EPSS
Exploits0References3
OSV
OSV
added 2025/01/08 7:22 a.m.7 views

BIT-VALKEY-2024-46981 Redis' Lua library commands may lead to remote code execution

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate...

9.8CVSS7.3AI score0.80733EPSS
Exploits2References11
SUSE CVE
SUSE CVE
added 2023/02/15 3:41 a.m.1 views

SUSE CVE-2021-32626

Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with heap corruption and potentially remote co...

7.5CVSS8.3AI score0.0246EPSS
Exploits0References5
OSV
OSV
added 2022/09/23 11:4 a.m.3 views

OESA-2022-1958 redis5 security update

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

9CVSS8.3AI score0.05836EPSS
Exploits0References8
Rows per page
Query Builder