https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:28:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-04030 bdu:2021-04030 https://cve.radiocsirt.org/vuln/bdu:2021-04030 https://cve.radiocsirt.org/vuln/bell-cve-2021-32761 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2021-32761 https://cve.radiocsirt.org/vuln/cleanstart-2026-cf03988 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: redis</p> <p>Package redis version 6.2.5-r0 fixes 1 vulnerabilities: CVE-2021-32761</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: redis</p> <p>Package redis version 6.2.5-r0 fixes 1 vulnerabilities: CVE-2021-32761</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-cf03988 https://cve.radiocsirt.org/vuln/cnvd-2021-53330 cnvd-2021-53330 https://cve.radiocsirt.org/vuln/cnvd-2021-53330 https://cve.radiocsirt.org/vuln/euvd-2026-28135 EUVD-2026-28135 https://cve.radiocsirt.org/vuln/euvd-2026-28135 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32761 <p>Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with version 2.2 and prior to versions 5.0.13, 6.0.15, and 6.2.5. On 32-bit systems, Redis `*BIT*` command are vulnerable to integer overflow that can potentially be exploited to corrupt the heap, leak arbitrary heap contents or trigger remote code execution. The vulnerability involves changing the default `proto-max-bulk-len` configuration parameter to a very large value and constructing specially crafted commands bit commands. This problem only affects Redis on 32-bit platforms, or compiled as a 32-bit binary. Redis versions 5.0.`3m 6.0.15, and 6.2.5 contain patches for this issue. An additional workaround to mitigate the problem without patching the `redis-server` executable is to prevent users from modifying the `proto-max-bulk-len` configuration parameter. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.</p> <p>Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with version 2.2 and prior to versions 5.0.13, 6.0.15, and 6.2.5. On 32-bit systems, Redis `*BIT*` command are vulnerable to integer overflow that can potentially be exploited to corrupt the heap, leak arbitrary heap contents or trigger remote code execution. The vulnerability involves changing the default `proto-max-bulk-len` configuration parameter to a very large value and constructing specially crafted commands bit commands. This problem only affects Redis on 32-bit platforms, or compiled as a 32-bit binary. Redis versions 5.0.`3m 6.0.15, and 6.2.5 contain patches for this issue. An additional workaround to mitigate the problem without patching the `redis-server` executable is to prevent users from modifying the `proto-max-bulk-len` configuration parameter. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32761 https://cve.radiocsirt.org/vuln/gsd-2021-32761 gsd-2021-32761 https://cve.radiocsirt.org/vuln/gsd-2021-32761 https://cve.radiocsirt.org/vuln/msrc_cve-2021-32761 msrc_CVE-2021-32761 https://cve.radiocsirt.org/vuln/msrc_cve-2021-32761 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11299-1 <p>redis-6.2.5-1.2 on GA media</p> <p>redis-6.2.5-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11299-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32761 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: redis, Ubuntu:Pro:16.04:LTS: redis, Ubuntu:Pro:18.04:LTS: redis</p> <p>Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with version 2.2 and prior to versions 5.0.13, 6.0.15, and 6.2.5. On 32-bit systems, Redis `*BIT*` command are vulnerable to integer overflow that can potentially be exploited to corrupt the heap, leak arbitrary heap contents or trigger remote code execution. The vulnerability involves changing the default `proto-max-bulk-len` configuration parameter to a very large value and constructing specially crafted commands bit commands. This problem only affects Redis on 32-bit platforms, or compiled as a 32-bit binary. Redis versions 5.0.`3m 6.0.15, and 6.2.5 contain patches for this issue. An additional workaround to mitigate the problem without patching the `redis-server` executable is to prevent users from modifying the `proto-max-bulk-len` configuration parameter. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: redis, Ubuntu:Pro:16.04:LTS: redis, Ubuntu:Pro:18.04:LTS: redis</p> <p>Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with version 2.2 and prior to versions 5.0.13, 6.0.15, and 6.2.5. On 32-bit systems, Redis `*BIT*` command are vulnerable to integer overflow that can potentially be exploited to corrupt the heap, leak arbitrary heap contents or trigger remote code execution. The vulnerability involves changing the default `proto-max-bulk-len` configuration parameter to a very large value and constructing specially crafted commands bit commands. This problem only affects Redis on 32-bit platforms, or compiled as a 32-bit binary. Redis versions 5.0.`3m 6.0.15, and 6.2.5 contain patches for this issue. An additional workaround to mitigate the problem without patching the `redis-server` executable is to prevent users from modifying the `proto-max-bulk-len` configuration parameter. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32761 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1578 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Redis ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Redis ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1578