5592 matches found
netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator
A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by repeatedly closing Redis pipeline connections before a Redis array aggregate completes. This leads to a permanent leak of direct-memory buffers, which prevents memory chunks from being returned to the share...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads
A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by sending specially crafted Redis payloads across multiple connections without proper termination. This can exhaust the server's direct memory pool, leading to a Denial of Service DoS condition where legitima...
netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator
A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by repeatedly closing Redis pipeline connections before a Redis array aggregate completes. This leads to a permanent leak of direct-memory buffers, which prevents memory chunks from being returned to the share...
netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays
A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by sending a specially crafted Redis payload containing deeply nested arrays. This action forces the server to allocate a large number of state objects and collections, leading to memory exhaustion...
netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads
A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by sending specially crafted Redis payloads across multiple connections without proper termination. This can exhaust the server's direct memory pool, leading to a Denial of Service DoS condition where legitima...
CVE-2026-34501
A flaw was found in the Redis client in the Apache Portable Runtime Utility apr-util. A heap buffer overflow can be triggered when the application processes a specially crafted response from a Redis server, resulting in a crash and denial of service. Mitigation Ensure that the Redis server used b...
Redis 8.8.1 Heap Out-Of-Bounds Read
A proof of concept exploit for a heap out-of-bounds read vulnerability in Redis version 8.8.1. The vulnerability exists in Redis Cluster bus PING/PONG/MEET hostname extensions, where a hostname payload lacking a required NUL terminator can cause Redis to read beyond the end of the receive buffer...
Linux Distros Unpatched Vulnerability : CVE-2026-72568
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by...
CVE-2026-72568
Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid...
DEBIAN-CVE-2026-72568
An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port...
UBUNTU-CVE-2026-72568
An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port...
CVE-2026-72568
Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid...
Security Bulletin:Vulnerability in Netty affects IBM Netezza Appliance
Summary The Netty package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-44250, CVE-2026-44890 Vulnerability Details CVEID:CVE-2026-44250 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. In...
EUVD-2026-55238
An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port...
CVE-2026-72568
Red Hat CNA-LR concluded this CVE is not valid; no patch, advisory, or technical details are present in any connected document, so this CVE ID is rejected/not used and does not represent an active vulnerability entry.
CVE-2026-72568
...
