PT-2025-28132

Name of the Vulnerable Software and Affected Versions: Redis versions prior to 8.0.3 Redis versions prior to 7.4.5 Redis versions prior to 7.2.10 Redis versions prior to 6.2.19 Description: The issue is related to an unauthenticated connection that can cause repeated IP protocol errors, leading t...

PT-2025-28183

Name of the Vulnerable Software and Affected Versions: Redis versions 2.8 through 8.0.3, 7.4.5, 7.2.10, and 6.2.19. Valkey versions up to 8.1.3 and 8.0.4 are also affected. Description: Redis and Valkey are vulnerable to a heap-based buffer overflow in the HyperLogLog functionality. An...

SUSE SLES15 / openSUSE 15 Security Update : redis (SUSE-SU-2025:02190-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02190-1 advisory. - CVE-2025-27151: Absence of filename size check may cause a stack overflow bsc1243804 Tenable has extracted the preceding...

SUSE SLES15 Security Update : redis (SUSE-SU-2025:02010-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02010-1 advisory. - CVE-2025-21605: output buffer denial of service bsc1241708. Tenable has extracted the preceding description block directly from the SUSE...

TencentOS Server 4: redis (TSSA-2024:0583)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0583 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Sensitive Information Disclosure

yiisoft/yii2-redis is vulnerable to Sensitive Information Disclosure. The vulnerability is due to information disclosure due to authentication credentials username and password being logged in plain text during failed connection attempts...

Updated redis packages fix security vulnerability

Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client. CVE-2025-21605...

CVE-2025-27151

Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlenfilepath when copying a user-supplied file path into a fixed-size stack buffer. This allo...

CVE-2025-27151 redis-check-aof may lead to stack overflow and potential RCE

Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlenfilepath when copying a user-supplied file path into a fixed-size stack buffer. This allo...

Redis 安全漏洞

Redis is an open source, ANSI C, network-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis, Inc. that provides APIs in multiple languages. A security vulnerability exists in Redis versions prior to 7.0.0 through 8.0.2, which stems from a stack-based buffer...

PT-2025-23146

Name of the Vulnerable Software and Affected Versions Redis versions 7.0.0 through 8.0.2 Description Redis is an open source, in-memory database that persists on disk. A stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlenfilepath when copying a user-supplied...

Redis Buffer Overflow Vulnerability (GHSA-5453-q98w-cmvm)

Redis is prone to a stack-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...

RHEL 9 : redis (RHSA-2025:7438)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7438 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and...

Alibaba Cloud Linux 3 : 0071: redis:6 (ALINUX3-SA-2025:0071)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0071 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-21605: Redis is an open source, in-memory...

Oracle Linux 9 : redis (ELSA-2025-7438)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7438 advisory. 6.2.18-1 - rebase to 6.2.18 for CVE-2025-21605 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

CVE-2022-3734

A vulnerability was found in a port or fork of Redis. It has been declared as critical. This vulnerability affects unknown code in the library C:/Program Files/Redis/dbghelp.dll. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclos...

Oracle Linux 9 : redis:7 (ELSA-2025-7429)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7429 advisory. - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 Tenable has extracted the preceding description block directly from...

CVE-2021-41172

ASRedis is an AntSword plugin for Redis. The Redis Manage plugin for AntSword prior to version 0.5 is vulnerable to Self-XSS due to due to insufficient input validation and sanitization via redis server configuration. Self-XSS in the plugin configuration leads to code execution. This issue is...

Oracle Linux 8 : redis:6 (ELSA-2025-7686)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7686 advisory. 6.2.18-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.18-1 - rebase to 6.2.18 for CVE-2025-21605 Tenable has extracted the...

redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client

A flaw was found in the Redis server. This flaw allows an unauthenticated client to cause an unlimited growth of output buffers until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients see client-output-buffer-limit...