335 matches found
AZL-64827 CVE-2025-48367 affecting package valkey for versions less than 8.0.4-1
Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...
AZL-64824 CVE-2025-32023 affecting package valkey for versions less than 8.0.4-1
Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The...
Security update for valkey
This update for valkey fixes the following issues: CVE-2025-27151: Absence of filename size check may cause a stack overflow bsc1243804. CVE-2025-49112: setDeferredReply integer underflow bsc1243913. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods lik...
SUSE-SU-2025:02231-1 Security update for valkey
This update for valkey fixes the following issues: - CVE-2025-27151: Absence of filename size check may cause a stack overflow bsc1243804. - CVE-2025-49112: setDeferredReply integer underflow bsc1243913...
FreeBSD : redis,valkey -- {redis,valkey}-check-aof may lead to stack overflow and potential RCE (4ea9cbc3-5b28-11f0-b507-000c295725e4)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4ea9cbc3-5b28-11f0-b507-000c295725e4 advisory. Simcha Kosman & CyberArk Labs reports: A user can run the redis,valkeyu-check-aof cli and pass a long...
PT-2025-28183
Name of the Vulnerable Software and Affected Versions: Redis versions 2.8 through 8.0.3, 7.4.5, 7.2.10, and 6.2.19. Valkey versions up to 8.1.3 and 8.0.4 are also affected. Description: Redis and Valkey are vulnerable to a heap-based buffer overflow in the HyperLogLog functionality. An...
OPENSUSE-SU-2025:15306-1 valkey-8.1.2-1.1 on GA media
These are all security issues fixed in the valkey-8.1.2-1.1 package on the GA media of openSUSE Tumbleweed...
Low: valkey
Issue Overview: setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-size - prev-used. CVE-2025-49112 Affected Packages: valkey Issue Correction: Run dnf update valkey --releasever 2023.7.20250623 to update your system. New Packages: aarch64: ...
Low: valkey
Issue Overview: setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-size - prev-used. CVE-2025-49112 Affected Packages: valkey Issue Correction: Run dnf update valkey --releasever 2023.7.20250623 or dnf update --advisory ALAS2023-2025-1025 --releasever...
Amazon Linux 2023 : valkey, valkey-devel (ALAS2023-2025-1025)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1025 advisory. setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-size - prev-used. CVE-2025-49112 Tenable has extracted the preceding description block directly from the teste...
Fedora: Security Advisory (FEDORA-2025-129268f8e4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 42 Update: valkey-8.0.3-3.fc42
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
Fedora 42 : valkey (2025-129268f8e4)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-129268f8e4 advisory. Fix CVE-2025-49112 ---- Fix CVE-2025-49112 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...
SUSE-SU-2025:01942-1 Security update for valkey
This update for valkey fixes the following issues: - CVE-2025-27151: Absence of filename size check may cause a stack overflow bsc1243804 - CVE-2025-49112: setDeferredReply integer underflow bsc1243913 - CVE-2025-21605: Output buffer denial of service bsc1241708...
Fedora: Security Advisory (FEDORA-2025-a89cb837a1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 10 : valkey (RHSA-2025:7509)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7509 advisory. Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and...
SUSE CVE-2025-49112
setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-size - prev-used...
CVE-2025-49112
A flaw was found in valkey. An integer underflow in the setDeferredReply function of networking.c allows an adjacent network attacker to potentially trigger unexpected behavior. This underflow occurs when calculating prev-size - prev-used, leading to a condition that may result in a denial of...
