25 matches found
SUSE CVE-2026-97057
redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length. A malicious or compromised Redis endpoint can deliver a crafted RESP header with a length abov...
CVE-2026-97057
A flaw was found in redis-parser. This vulnerability allows a malicious or compromised Redis endpoint to trigger an uncaught RangeError by sending a crafted RESP REdis Serialization Protocol header with an excessively large declared length. The flaw occurs because redis-parser fails to validate t...
CVE-2026-97057
redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length. A malicious or compromised Redis endpoint can deliver a crafted RESP header with a length abov...
CVE-2026-97057 redis-parser through 3.0.0 Denial of Service via Invalid Array Length
redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length. A malicious or compromised Redis endpoint can deliver a crafted RESP header with a length abov...
CVE-2026-97057
The redis-parser library, in versions through 3.0.0 , is vulnerable to a Denial of Service (DoS) attack due to improper validation of the multi-bulk length value during RESP protocol parsing . An attacker who controls or compromises a Redis endpoint can send a crafted RESP header with a declared ...
EUVD-2026-85883
redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length. A malicious or compromised Redis endpoint can deliver a crafted RESP header with a length abov...
CVE-2026-97057 redis-parser through 3.0.0 Denial of Service via Invalid Array Length
redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length. A malicious or compromised Redis endpoint can deliver a crafted RESP header with a length abov...
CVE-2026-97057 redis-parser through 3.0.0 Denial of Service via Invalid Array Length
redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length. A malicious or compromised Redis endpoint can deliver a crafted RESP header with a length abov...
CVE-2026-97057: Improper Validation of Specified Quantity in Input
redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length. A malicious or compromised Redis endpoint can deliver a crafted RESP header with a length abov...
PT-2026-97800
Name of the Vulnerable Software and Affected Versions redis-parser versions prior to 3.0.1 Description An issue exists in the RESP Redis Serialization Protocol parsing where the multi-bulk length value is not properly validated. A malicious or compromised Redis endpoint can send a crafted RESP...
SUSE CVE-2026-93435
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust t...
EUVD-2026-82533
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust t...
CVE-2026-93435
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust t...
CVE-2026-93435 redis-parser through 3.0.0 Denial of Service via Unbounded Recursion
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust t...
CVE-2026-93435 redis-parser through 3.0.0 Denial of Service via Unbounded Recursion
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust t...
CVE-2026-93435 redis-parser through 3.0.0 Denial of Service via Unbounded Recursion
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust t...
CVE-2026-93435
redis-parser through 3.0.0 contains a denial of service vulnerability in its RESP protocol parser . A malicious Redis endpoint can send crafted RESP byte streams with repeated array headers that trigger unbounded recursion on nested arrays, exhausting the V8 call stack . This produces an uncaught...
PT-2026-95163
Name of the Vulnerable Software and Affected Versions redis-parser versions prior to 3.0.1 Description A denial of service issue exists in the RESP Redis Serialization Protocol parser. Malicious Redis endpoints can crash the client process by sending crafted RESP byte streams containing repeated...
CVE-2026-93435: Uncontrolled Recursion
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust t...