Lucene search
K

10 matches found

OSV
OSV
added 2026/05/27 2:22 p.m.4 views

SUSE-SU-2026:2100-1 Security update for redis7

This update for redis7 fixes the following issues - CVE-2026-23631: Lua use-after-free via the master-replica synchronization mechanism may lead to remote code execution bsc1264165. - CVE-2026-25243: invalid memory access in RESTORE command via a specially crafted serialized payload may lead to...

8.8CVSS6.4AI score0.0095EPSS
Exploits0References5
OSV
OSV
added 2026/05/27 2:20 p.m.3 views

SUSE-SU-2026:2097-1 Security update for redis7

This update for redis7 fixes the following issues - CVE-2026-23631: Lua use-after-free via the master-replica synchronization mechanism may lead to remote code execution bsc1264165. - CVE-2026-25243: invalid memory access in RESTORE command via a specially crafted serialized payload may lead to...

8.8CVSS6.4AI score0.0095EPSS
Exploits0References6
OSV
OSV
added 2026/05/18 9:59 a.m.18 views

SUSE-SU-2026:21814-1 Security update for valkey

This update for valkey fixes the following issues - CVE-2025-67733: data tampering and denial of service via improper null character handling in Lua scripts bsc1258746. - CVE-2026-21863: denial of service via invalid clusterbus packet bsc1258788. - CVE-2026-23479: use-after-free in unblock client...

8.8CVSS6.5AI score0.0095EPSS
Exploits4References11
OSV
OSV
added 2026/05/14 2:43 a.m.3 views

MGASA-2026-0134 Updated redis packages fix security vulnerabilities

CVE-2026-23479 Use-After-Free in unblock client flow may lead to Remote Code Execution. CVE-2026-25243 Invalid memory access in RESTORE may lead to Remote Code Execution CVE-2026-23631 Lua Use-After-Free may lead to remote code execution A user can manipulate data read by a connection by injectin...

8.8CVSS6.1AI score0.0095EPSS
Exploits4References5
Tenable Nessus
Tenable Nessus
added 2025/11/19 12:0 a.m.5 views

AlmaLinux 9 : redis (ALSA-2025:20926)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:20926 advisory. redis: Lua library commands may lead to integer overflow and potential RCE CVE-2025-46817 Redis: Redis: Authenticated users can execute LUA scripts as a...

9.9CVSS9.2AI score0.86268EPSS
Exploits15References6
RedHat Linux
RedHat Linux
added 2025/11/11 3:7 p.m.3 views

Important: Red Hat Security Advisory: redis:7 security update

An update for the redis:7 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.9CVSS8.2AI score0.86268EPSS
Exploits15References5
OSV
OSV
added 2025/11/11 12:0 a.m.4 views

ALSA-2025:20926 Important: redis security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

9.9CVSS8.5AI score0.86268EPSS
Exploits15References10
AlmaLinux
AlmaLinux
added 2025/10/29 12:0 a.m.3 views

Important: redis:6 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

9.9CVSS8.7AI score0.86268EPSS
Exploits15References10
OpenVAS
OpenVAS
added 2025/10/06 12:0 a.m.14 views

Redis Multiple Vulnerabilities (Oct 2025, RediShell)

Redis is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if description...

9.9CVSS7.9AI score0.86268EPSS
Exploits15References17
OSV
OSV
added 2022/03/14 3:15 p.m.3 views

AZL-60112 CVE-2021-44964 affecting package memcached for versions less than 1.6.22-2

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...

6.3CVSS6.8AI score0.01027EPSS
Exploits1References1
Rows per page
Query Builder