5476 matches found
redis: Integer overflow issue with Streams
An integer overflow issue was found in redis. The vulnerability involves changing the default "proto-max-bulk-len" and "client-query-buffer-limit" configuration parameters to very large values and constructing specially crafted large stream elements. This flaw allows a remote attacker to corrupt...
redis: Denial of service via Redis Standard Protocol (RESP) request
A flaw was found in redis. When parsing an incoming Redis Standard Protocol RESP request, redis allocates memory according to user-specified values, which determine the number of elements in the multi-bulk header and size of each element in the bulk header. This flaw allows an unauthenticated,...
redis: Integer overflow bug in the ziplist data structure
An integer overflow issue was found in the redis ziplist data structure. The vulnerability involves modifying the default ziplist configuration parameters hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries or zset-max-ziplist-value to a very large value, and then...
redis: Lua scripts can overflow the heap-based Lua stack
A heap buffer overflow was found in redis. Specially crafted Lua scripts executing in Redis cause the heap-based Lua stack to overflow due to incomplete checks for this condition. This flaw allows a remote attacker to corrupt the heap and potentially trigger remote code execution. The highest...
redis: Integer overflow issue with strings
An integer overflow issue was found in redis in the underlying string library. The vulnerability involves changing the default "proto-max-bulk-len" configuration parameter to a very large value and constructing specially crafted network payloads or commands. This flaw allows a remote attacker to...
redis: Lua scripts can overflow the heap-based Lua stack
A heap buffer overflow was found in redis. Specially crafted Lua scripts executing in Redis cause the heap-based Lua stack to overflow due to incomplete checks for this condition. This flaw allows a remote attacker to corrupt the heap and potentially trigger remote code execution. The highest...
redis: Integer overflow issue with intsets
An integer overflow issue was found in redis. The vulnerability involves changing the default "set-max-intset-entries" configuration parameter to a very large value and constructing specially crafted commands to manipulate sets. This flaw allows a remote attacker to leak arbitrary contents of the...
redis: Denial of service via Redis Standard Protocol (RESP) request
A flaw was found in redis. When parsing an incoming Redis Standard Protocol RESP request, redis allocates memory according to user-specified values, which determine the number of elements in the multi-bulk header and size of each element in the bulk header. This flaw allows an unauthenticated,...
Important: Red Hat Security Advisory: Red Hat OpenStack Platform 10.0 (redis) security update
An update for redis is now available for Red Hat OpenStack Platform 10 Newton. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
redis: Integer overflow bug in the ziplist data structure
An integer overflow issue was found in the redis ziplist data structure. The vulnerability involves modifying the default ziplist configuration parameters hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries or zset-max-ziplist-value to a very large value, and then...
redis: Integer overflow issue with strings
An integer overflow issue was found in redis in the underlying string library. The vulnerability involves changing the default "proto-max-bulk-len" configuration parameter to a very large value and constructing specially crafted network payloads or commands. This flaw allows a remote attacker to...
redis: Integer overflow issue with Streams
An integer overflow issue was found in redis. The vulnerability involves changing the default "proto-max-bulk-len" and "client-query-buffer-limit" configuration parameters to very large values and constructing specially crafted large stream elements. This flaw allows a remote attacker to corrupt...
CVE-2021-32675 affecting package redis 5.0.5-7
CVE-2021-32675 affecting package redis 5.0.5-7. An upgraded version of the package is available that resolves this issue...
CVE-2021-32626 affecting package redis 5.0.5-7
CVE-2021-32626 affecting package redis 5.0.5-7. An upgraded version of the package is available that resolves this issue...
CVE-2021-32628 affecting package redis 5.0.5-7
CVE-2021-32628 affecting package redis 5.0.5-7. An upgraded version of the package is available that resolves this issue...
CVE-2021-41099 affecting package redis 5.0.5-7
CVE-2021-41099 affecting package redis 5.0.5-7. An upgraded version of the package is available that resolves this issue...
CVE-2021-32762 affecting package redis 5.0.5-7
CVE-2021-32762 affecting package redis 5.0.5-7. An upgraded version of the package is available that resolves this issue...
CVE-2021-32761 affecting package redis 5.0.5-7
CVE-2021-32761 affecting package redis 5.0.5-7. An upgraded version of the package is available that resolves this issue...