Most recent entries from all

bdu:2023-02305

Withdrawn: BELL-CVE-2021-32762 — CVE-2021-32762 does not affect BellSoft software

Withdrawn by the publisher.

BIT-keydb-2021-32762 — Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms

Affected: Bitnami: keydb

Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer overflow when parsing specially crafted large multi-bulk network replies. This is a result of a vulnerability in the underlying hiredis library which does not perform an overflow check before calling the calloc() heap allocation function. This issue only impacts systems with heap allocators that do not perform their own overflow checks. Most modern systems do and are therefore not likely to be affected. Furthermore, by default redis-sentinel uses the jemalloc allocator which is also not vulnerable. The problem is fixed in Redis versions 6.2.6, 6.0.16 and 5.0.14.

certfr-2021-avi-848 — De multiples vulnérabilités ont été découvertes dans les produits NetApp. Elles permettent à un attaquant de provoquer…

certfr-2021-avi-848

Withdrawn: CLEANSTART-2026-AF35851 — Redis is an open source, in-memory database that persists on disk

Withdrawn by the publisher.

Affected: CleanStart: redis

Multiple security vulnerabilities affect the redis package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details.

EUVD-2026-28158

fkie_cve-2021-32762

gsd-2021-32762

msrc_CVE-2021-32762 — Integer overflow that can lead to heap overflow in redis-cli redis-sentinel on some platforms

msrc_CVE-2021-32762

OESA-2021-1452 — redis5 security update

Affected: openEuler:20.03-LTS-SP1: redis5, openEuler:20.03-LTS-SP2: redis5

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Redis works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Redis also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Redis behave like a cache. You can use Redis from most programming languages also. Security Fix(es): Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with heap corruption and potentially remote code execution. This problem exists in all versions of Redis with Lua scripting support, starting from 2.6. The problem is fixed in versions 6.2.6, 6.0.16 and 5.0.14. For users u…

openSUSE-SU-2021:3772-1 — Security update for redis

Security update for redis

SUSE-SU-2021:3772-1 — Security update for redis

Security update for redis

UBUNTU-CVE-2021-32762

Affected: Ubuntu:16.04:LTS: hiredis, Ubuntu:16.04:LTS: webdis

WID-SEC-W-2022-1579 — Redis: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Redis ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.