https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T19:41:50.463540+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-31449 CVE-2024-31449 — Lua library commands may lead to stack overflow and RCE in Redis 2026-10-14T19:41:50.465004+00:00

Affected: redis

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/usn-8169-1 USN-8169-1 — redis, lua5.1, lua-cjson, lua-bitop vulnerabilities 2026-10-14T19:41:50.465088+00:00

Affected: Ubuntu:Pro:16.04:LTS: redis, Ubuntu:Pro:18.04:LTS: redis, Ubuntu:Pro:20.04:LTS: lua-bitop, Ubuntu:Pro:20.04:LTS: lua-cjson, Ubuntu:Pro:20.04:LTS: lua5.1, Ubuntu:Pro:22.04:LTS: lua-bitop, Ubuntu:Pro:22.04:LTS: lua-cjson, Ubuntu:Pro:22.04:LTS: lua5.1, Ubuntu:24.04:LTS: redis

It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue was only addressed in lua5.1 on Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2025-49844)

It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue was only addressed in lua-bitop on Ubuntu 20.04 LTS and Ubuntu 22.04 LTS and in redis on Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 24.04 LTS. (CVE-2024-31449)

Seiya Nakata and Yudai Fujiwara discovered that Redis incorrectly handled certain specially crafted Lua scripts. An attacker could possibly use this issue to cause heap corruption and execute arbitrary code. This issue was only addressed in lua-cjson on Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-24834)