Improper Input Validation

redis is vulnerable to Improper Input Validation. The vulnerability allows the 'HINCRBYFLOAT' command to be used by authenticated users which creates an invalid hash fish which crashes redis...

Fedora 36 : redis (2023-04239b5758)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-04239b5758 advisory. Redis 6.2.12 Released Mon Apr 17 16:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: CVE-2023-28856...

Fedora 38 : redis (2023-e4e3393396)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-e4e3393396 advisory. Redis 7.0.11 Released Mon Apr 17 16:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: CVE-2023-28856...

Fedora 37 : redis (2023-5b6510a584)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5b6510a584 advisory. Redis 7.0.11 Released Mon Apr 17 16:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: CVE-2023-28856...

`HINCRBYFLOAT` can be used to crash a redis-server process

...

Critical Photon OS Security Update - PHSA-2023-3.0-0570

Updates of 'redis', 'bluez' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-4.0-0380

Updates of 'redis', 'libxml2', 'libyang', 'bluez', 'vim' packages of Photon OS have been released...

Debian dla-3396 : redis - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3396 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3396-1 [email protected] https://www.debian.org/lts/security/...

MGASA-2023-0156 Updated redis packages fix security vulnerability

Authenticated users can use the HINCRBYFLOAT command to create an invalid hash field that will crash Redis on access. CVE-2023-28856...

Updated redis packages fix security vulnerability

Authenticated users can use the HINCRBYFLOAT command to create an invalid hash field that will crash Redis on access. CVE-2023-28856...

Mageia: Security Advisory (MGASA-2023-0156)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-3396-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of NoSQL Redis database management systems, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of NoSQL Redis database management systems is related to integer overflow in buffers. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

[SECURITY] [DLA 3396-1] redis security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3396-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb April 21, 2023 https://wiki.debian.org/LTS -...

DLA-3396-1 redis - security update

Bulletin has no description...

Redis < 6.0.19, 6.2.x < 6.2.12, 7.0.x < 7.0.11 DoS Vulnerability

Redis is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...

CVE-2023-28856

Redis is an open source, in-memory database that persists on disk. Authenticated users can use the HINCRBYFLOAT command to create an invalid hash field that will crash Redis on access in affected versions. This issue has been addressed in in versions 7.0.11, 6.2.12, and 6.0.19. Users are advised ...

DEBIAN-CVE-2023-28856

Redis is an open source, in-memory database that persists on disk. Authenticated users can use the HINCRBYFLOAT command to create an invalid hash field that will crash Redis on access in affected versions. This issue has been addressed in in versions 7.0.11, 6.2.12, and 6.0.19. Users are advised ...

AZL-26290 CVE-2023-28856 affecting package redis for versions less than 6.2.12-1

Redis is an open source, in-memory database that persists on disk. Authenticated users can use the HINCRBYFLOAT command to create an invalid hash field that will crash Redis on access in affected versions. This issue has been addressed in in versions 7.0.11, 6.2.12, and 6.0.19. Users are advised ...

CVE-2023-28856

Redis is an open source, in-memory database that persists on disk. Authenticated users can use the HINCRBYFLOAT command to create an invalid hash field that will crash Redis on access in affected versions. This issue has been addressed in in versions 7.0.11, 6.2.12, and 6.0.19. Users are advised ...