https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:37:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-04264 bdu:2023-04264 https://cve.radiocsirt.org/vuln/bdu:2023-04264 https://cve.radiocsirt.org/vuln/bell-cve-2023-36824 <p><strong>Affected:</strong> Alpaquita:23: redis</p> <p><strong>Affected:</strong> Alpaquita:23: redis</p> https://cve.radiocsirt.org/vuln/bell-cve-2023-36824 https://cve.radiocsirt.org/vuln/bit-keydb-2023-36824 <p><strong>Affected:</strong> Bitnami: keydb</p> <p>Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.</p> <p><strong>Affected:</strong> Bitnami: keydb</p> <p>Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.</p> https://cve.radiocsirt.org/vuln/bit-keydb-2023-36824 https://cve.radiocsirt.org/vuln/cleanstart-2026-af35851 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: redis</p> <p>Multiple security vulnerabilities affect the redis package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: redis</p> <p>Multiple security vulnerabilities affect the redis package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-af35851 https://cve.radiocsirt.org/vuln/euvd-2026-216609 EUVD-2026-216609 https://cve.radiocsirt.org/vuln/euvd-2026-216609 https://cve.radiocsirt.org/vuln/fkie_cve-2023-36824 <p>Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.</p> <p>Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-36824 https://cve.radiocsirt.org/vuln/gsd-2023-36824 gsd-2023-36824 https://cve.radiocsirt.org/vuln/gsd-2023-36824 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13047-1 <p>redis-7.0.12-1.1 on GA media</p> <p>redis-7.0.12-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13047-1 https://cve.radiocsirt.org/vuln/suse-su-2023:2925-1 <p>Security update for redis7</p> <p>Security update for redis7</p> https://cve.radiocsirt.org/vuln/suse-su-2023:2925-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-36824 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: redis</p> <p>Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: redis</p> <p>Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-36824 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1698 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Redis ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Redis ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1698