https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:49:39 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:10869 <p><strong>Affected:</strong> AlmaLinux:9: redis, AlmaLinux:9: redis-devel, AlmaLinux:9: redis-doc</p> <p>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.</p> <p>Security Fix(es):</p> <p>* redis: Redis SORT_RO may bypass ACL configuration (CVE-2023-41053) * redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145) * redis: Denial-of-service due to malformed ACL selectors in Redis (CVE-2024-31227) * redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449) * redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: redis, AlmaLinux:9: redis-devel, AlmaLinux:9: redis-doc</p> <p>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.</p> <p>Security Fix(es):</p> <p>* redis: Redis SORT_RO may bypass ACL configuration (CVE-2023-41053) * redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145) * redis: Denial-of-service due to malformed ACL selectors in Redis (CVE-2024-31227) * redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449) * redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:10869 https://cve.radiocsirt.org/vuln/bdu:2024-09249 bdu:2024-09249 https://cve.radiocsirt.org/vuln/bdu:2024-09249 https://cve.radiocsirt.org/vuln/bell-cve-2024-31227 <p><strong>Affected:</strong> Alpaquita:23: redis, Alpaquita:stream: redis</p> <p><strong>Affected:</strong> Alpaquita:23: redis, Alpaquita:stream: redis</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-31227 https://cve.radiocsirt.org/vuln/bit-keydb-2024-31227 <p><strong>Affected:</strong> Bitnami: keydb</p> <p>Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p><strong>Affected:</strong> Bitnami: keydb</p> <p>Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/bit-keydb-2024-31227 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0210 certfr-2025-avi-0210 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0210 https://cve.radiocsirt.org/vuln/cleanstart-2026-af35851 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: redis</p> <p>Multiple security vulnerabilities affect the redis package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: redis</p> <p>Multiple security vulnerabilities affect the redis package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-af35851 https://cve.radiocsirt.org/vuln/euvd-2026-193687 EUVD-2026-193687 https://cve.radiocsirt.org/vuln/euvd-2026-193687 https://cve.radiocsirt.org/vuln/fkie_cve-2024-31227 <p>Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p>Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-31227 https://cve.radiocsirt.org/vuln/gsd-2024-31227 gsd-2024-31227 https://cve.radiocsirt.org/vuln/gsd-2024-31227 https://cve.radiocsirt.org/vuln/msrc_cve-2024-31227 msrc_CVE-2024-31227 https://cve.radiocsirt.org/vuln/msrc_cve-2024-31227 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14412-1 <p>valkey-8.0.1-1.1 on GA media</p> <p>valkey-8.0.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14412-1 https://cve.radiocsirt.org/vuln/suse-su-2024:3535-1 <p>Security update for redis</p> <p>Security update for redis</p> https://cve.radiocsirt.org/vuln/suse-su-2024:3535-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-31227 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: redis</p> <p>Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: redis</p> <p>Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-31227 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3066 <p>Ein Angreifer kann mehrere Schwachstellen in Redis ausnutzen, um einen Denial of Service Angriff durchzuführen oder Code auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Redis ausnutzen, um einen Denial of Service Angriff durchzuführen oder Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3066