Most recent entries from all

fkie_cve-2026-72568

2026-10-03T21:22:19.733663+00:00

Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid.

GHSA-qhgh-7273-8939

2026-10-03T21:22:19.733741+00:00

An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port.

msrc_CVE-2026-72568 — Redis - Heap Out-of-Bounds Read in Cluster Bus PING Message Handler

2026-10-03T21:22:19.733773+00:00

msrc_CVE-2026-72568

RHSA-2026:43236 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

2026-10-03T21:22:19.733801+00:00

redis: Redis: Remote Code Execution via specially crafted RESTORE payload

RHSA-2026:65120 — Red Hat Security Advisory: redis:7 security update

2026-10-03T21:22:19.733831+00:00

redis: Redis: Remote Code Execution via specially crafted RESTORE payload redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free redis: Redis: Out-of-bounds read via crafted cluster bus packets

RLSA-2026:65120 — Important: redis:7 security update

2026-10-03T21:22:19.733866+00:00

Affected: Rocky Linux:9: redis

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.

Security Fix(es):

* redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373)

* redis: Redis: Denial of Service via Out-of-Bounds Read in Cluster Bus (CVE-2026-72568)

* redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Withdrawn: UBUNTU-CVE-2026-72568

2026-10-03T21:22:19.733920+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: redis, Ubuntu:Pro:16.04:LTS: redis, Ubuntu:Pro:18.04:LTS: redis, Ubuntu:Pro:20.04:LTS: redis, Ubuntu:Pro:22.04:LTS: redis, Ubuntu:24.04:LTS: redis, Ubuntu:26.04:LTS: redis

WID-SEC-W-2026-2745 — Redis: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen

2026-10-03T21:22:19.733972+00:00

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in Redis ausnutzen, um einen Denial of Service Angriff durchzuführen und Informationen offenzulegen.