Lucene search
+L

11 matches found

SUSE CVE
SUSE CVE
added 2026/09/01 1:25 p.m.9 views

SUSE CVE-2026-81934

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server...

7.5CVSS6.1AI score0.00435EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/28 12:00 a.m.18 views

Linux Distros Unpatched Vulnerability : CVE-2026-81934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData' function, which handles the TLS pending-data list if Redis is configured with TLS...

7.5CVSS6.1AI score0.00435EPSS
SaveExploits0References4
ICS
ICS
added 2026/08/27 7:51 p.m.8 views

Redis TLS pending-data list use-after-free

RISK EVALUATION Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis...

7.5CVSS6.1AI score0.00435EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/27 7:40 p.m.93 views

CVE-2026-81934 Redis TLS pending-data list use-after-free

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server...

7.5CVSS6.1AI score
SaveExploits0References26
Debian CVE
Debian CVE
added 2026/08/27 7:40 p.m.13 views

CVE-2026-81934

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server...

7.5CVSS6.1AI score0.00435EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/08/27 7:40 p.m.14 views

CVE-2026-81934 Redis TLS pending-data list use-after-free

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server...

7.5CVSS6.1AI score0.00435EPSS
SaveExploits0References24
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.15 views

PT-2026-82754

Name of the Vulnerable Software and Affected Versions Redis versions prior to 8.2.9 Redis versions prior to 8.4.6 Redis versions prior to 8.6.6 Redis versions prior to 8.8.2 Redis versions prior to 8.10.1 Description A use-after-free issue exists in the tlsProcessPendingData function, which manag...

7.5CVSS6.1AI score0.00435EPSS
SaveExploits0References37
OSV
OSV
added 2026/08/24 5:53 a.m.14 views

BIT-VALKEY-2026-56684 Valkey: TLS pending-data processing use-after-free may allow remote code execution

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...

7.5CVSS6.4AI score0.00523EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/08/24 12:00 a.m.17 views

PT-2026-80001

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pending list while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...

7.5CVSS6.3AI score0.00523EPSS
SaveExploits0References10
NVD
NVD
added 2026/08/18 3:16 p.m.15 views

CVE-2026-56684

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...

7.5CVSS0.00523EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/18 2:19 p.m.23 views

CVE-2026-56684 Valkey: TLS pending-data processing use-after-free may allow remote code execution

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...

7.5CVSS0.00523EPSS
SaveExploits0References8
Rows per page
Query Builder