469 matches found
valkey security, bug fix, and enhancement update
8.0.10-1 - Rebase to 8.0.10 for CVE-2026-56684 CVE-2026-63639 CVE-2026-66373 in redis...
valkey security, bug fix, and enhancement update
8.0.11-1 - Rebase to 8.0.11 for CVE-2026-56684 CVE-2026-63639 CVE-2026-66373 in redis...
ALSA-2026:64796 Important: valkey security, bug fix, and enhancement update
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
Important: valkey security, bug fix, and enhancement update
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
EUVD-2026-72176
A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...
UBUNTU-CVE-2026-85522
A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Af...
Linux Distros Unpatched Vulnerability : CVE-2026-86227
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation...
DEBIAN-CVE-2026-86227
A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...
CVE-2026-86227
A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...
CVE-2026-86227
valkey-io valkey (up to 9.0.5/9.1.1) contains an out-of-bounds read in the kvstoreGetHashtable function of src/kvstore.c, triggered by manipulation of the didx argument. Exploitation requires cluster mode plus an attacker-controlled dump.rdb at startup (via data-dir write access, replication feed...
CVE-2026-86227 valkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds
A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...
CVE-2026-86227
A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...
CVE-2026-86227 valkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds
A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...
CVE-2025-67733
RESP协议注入概念验证 演示通过Valkey/Redis中的Lua脚本错误消息进行的RESP协议注入漏洞的概念验证。 文件 backend.py Flask后端模拟一个使用共享Valkey连接(连接池)的Web应用程序。 端点: 方法| 端点| 描述 ---|---|--- POST| /api/user/role| 设置用户角色 GET| /api/user/role| 获取用户角色 POST| /api/process| 执行Lua脚本 用法: root@kitploit: python backend.py password 示例 python backend.py...
PT-2026-86574
Name of the Vulnerable Software and Affected Versions valkey-io valkey versions prior to 9.0.6 valkey-io valkey versions prior to 9.1.2 Description A weakness exists in the kvstoreGetHashtable function within the src/kvstore.c file. Manipulation of the didx variable can lead to an out-of-bounds...
Linux Distros Unpatched Vulnerability : CVE-2026-85522
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file...
CVE-2026-82631 affecting package valkey for versions less than 8.0.11-1
CVE-2026-82631 affecting package valkey for versions less than 8.0.11-1. An upgraded version of the package is available that resolves this issue...
DEBIAN-CVE-2026-85522
A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...
CVE-2026-85522
A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...
EUVD-2026-71102
A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...