Most recent entries from all

bdu:2023-02451

Withdrawn: BELL-CVE-2021-32672 — CVE-2021-32672 does not affect BellSoft software

Withdrawn by the publisher.

BIT-keydb-2021-32672 — Vulnerability in Lua Debugger in Redis

Affected: Bitnami: keydb

Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support (3.2 or newer). The problem is fixed in versions 6.2.6, 6.0.16 and 5.0.14.

certfr-2021-avi-848 — De multiples vulnérabilités ont été découvertes dans les produits NetApp. Elles permettent à un attaquant de provoquer…

certfr-2021-avi-848

CLEANSTART-2026-AE22523 — Security fix for CVE-2021-32672 applied in: redis 6.2.6-r0

Affected: CleanStart: redis

Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-28062

fkie_cve-2021-32672

gsd-2021-32672

msrc_CVE-2021-32672 — Vulnerability in Lua Debugger in Redis

msrc_CVE-2021-32672

OESA-2021-1394 — redis security update

Affected: openEuler:20.03-LTS-SP1: redis, openEuler:20.03-LTS-SP2: redis

Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fix(es): Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support (3.2 or newer). The problem is fixed in versions 6.2.6, 6.0.16 and 5.0.14.(CVE-2021-32672)

openSUSE-SU-2021:3772-1 — Security update for redis

Security update for redis

RHSA-2021:3873 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.9 security, bug, and container updates

semver-regex: inefficient regular expression complexity nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name object-path: Type confusion vulnerability can lead to a bypass of CVE-2020-15256 nodejs-set-value: type confusion allows bypass of CVE-2019-10747 redis: Lua scripts can overflow the heap-based Lua stack redis: Integer overflow issue with Streams redis: Integer overflow bug in the ziplist data structure redis: Out of bounds read in lua debugger protocol parser redis: Denial of service via Redis Standard Protocol (RESP) request redis: Integer overflow issue with intsets redis: Integer overflow issue with strings

SUSE-SU-2021:3772-1 — Security update for redis

Security update for redis

UBUNTU-CVE-2021-32672

Affected: Ubuntu:Pro:18.04:LTS: redis, Ubuntu:Pro:20.04:LTS: redis

WID-SEC-W-2022-1579 — Redis: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Redis ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.