https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:17:01 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-04141 bdu:2025-04141 https://cve.radiocsirt.org/vuln/bdu:2025-04141 https://cve.radiocsirt.org/vuln/certfr-2021-avi-848 certfr-2021-avi-848 https://cve.radiocsirt.org/vuln/certfr-2021-avi-848 https://cve.radiocsirt.org/vuln/cnvd-2022-10741 cnvd-2022-10741 https://cve.radiocsirt.org/vuln/cnvd-2022-10741 https://cve.radiocsirt.org/vuln/euvd-2026-28155 EUVD-2026-28155 https://cve.radiocsirt.org/vuln/euvd-2026-28155 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32765 <p>Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count * sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn&#39;t itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-array-elements) context option to a value small enough that no overflow is possible.</p> <p>Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count * sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn&#39;t itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-array-elements) context option to a value small enough that no overflow is possible.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32765 https://cve.radiocsirt.org/vuln/gsd-2021-32765 gsd-2021-32765 https://cve.radiocsirt.org/vuln/gsd-2021-32765 https://cve.radiocsirt.org/vuln/oesa-2021-1390 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: hiredis, openEuler:20.03-LTS-SP2: hiredis</p> <p>Hiredis is a minimalistic C client library for the Redis database. It is minimalistic because it just adds minimal support for the protocol, but at the same time it uses a high level printf-alike API in order to make it much higher level than otherwise suggested by its minimal code base and the lack of explicit bindings for every Redis command. Security Fix(es): Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count * sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn&amp;apos;t itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-array-elements) context option to a value small enough that no overflow is possible.(CVE-2021-32765)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: hiredis, openEuler:20.03-LTS-SP2: hiredis</p> <p>Hiredis is a minimalistic C client library for the Redis database. It is minimalistic because it just adds minimal support for the protocol, but at the same time it uses a high level printf-alike API in order to make it much higher level than otherwise suggested by its minimal code base and the lack of explicit bindings for every Redis command. Security Fix(es): Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count * sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn&amp;apos;t itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-array-elements) context option to a value small enough that no overflow is possible.(CVE-2021-32765)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1390 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1536-1 <p>Security update for hiredis</p> <p>Security update for hiredis</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1536-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32765 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: hiredis</p> <p>Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count * sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn&#39;t itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-array-elements) context option to a value small enough that no overflow is possible.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: hiredis</p> <p>Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count * sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn&#39;t itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-array-elements) context option to a value small enough that no overflow is possible.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32765