Linux Distros Unpatched Vulnerability : CVE-2025-32023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a speciall...

Linux Distros Unpatched Vulnerability : CVE-2024-51741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when...

Linux Distros Unpatched Vulnerability : CVE-2023-45145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided...

Linux Distros Unpatched Vulnerability : CVE-2025-48367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client...

Linux Distros Unpatched Vulnerability : CVE-2024-31228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string...

Alibaba Cloud Linux 3 : 0125: redis:6 (ALINUX3-SA-2025:0125)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0125 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-32023: Redis is an open source,...

RockyLinux 8 : redis:6 (RLSA-2025:7686)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7686 advisory. redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client CVE-2025-21605 Tenable has extracted the preceding...

RLSA-2025:7686 Important: redis:6 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

The vulnerability of the Redis database management system server, which involves unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the Redis database management system is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service failures through repeated unauthorized connections...

CVE-2025-46686

Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs because the server allocates memory for the command arguments of every bulk, even when the command is skipped because of insufficient permissions. NOTE: this i...

Redis DoS Vulnerability (GHSA-2r7g-8hpc-rpq9)

Redis is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...

CVE-2025-46686

Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs because the server allocates memory for the command arguments of every bulk, even when the command is skipped because of insufficient permissions. NOTE: this i...

Redis 安全漏洞

Redis is an open source, ANSI C, web-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis, Inc. with a multilingual API. A security vulnerability exists in Redis 7.4.3 and earlier versions, which stems from an improper memory allocation for multiple batch...

CVE-2025-46686

Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs because the server allocates memory for the command arguments of every bulk, even when the command is skipped because of insufficient permissions. NOTE: this i...

The vulnerability of the redis-check-aof command in the Redis database management system allows a hacker to execute arbitrary code.

The vulnerability of the redis-check-aof command in the Redis database management system is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CBL Mariner 2.0 Security Update: redis / valkey (CVE-2025-48367)

The version of redis / valkey installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-48367 advisory. - Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can...

CVE-2025-48367 affecting package redis for versions less than 6.2.18-3

CVE-2025-48367 affecting package redis for versions less than 6.2.18-3. A patched version of the package is available...

CBL Mariner 2.0 Security Update: redis / valkey (CVE-2025-32023)

The version of redis / valkey installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32023 advisory. - Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5,...

CVE-2025-32023 affecting package redis for versions less than 6.2.18-2

CVE-2025-32023 affecting package redis for versions less than 6.2.18-2. A patched version of the package is available...

Unspecified Vulnerability in Redis (CNVD-2025-16525)

Redis is the United States Redis company's set of open-source use of ANSI C written to support the network , can be based on memory can also be a persistent log-type , key-value Key-Value storage database , and provides a variety of languages API. Redis has a security vulnerability that can be...