CVE-2020-21468
A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service ...
A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS). NOTE: the vendor cannot reproduce this issue in a released version, such as 5.0.7.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS). NOTE: the vendor cannot reproduce this issue in a released version, such as 5.0.7.
- Record
CVE-2020-21468- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS). NOTE: the vendor cannot reproduce this issue in a released version, such as 5.0.7.
- Record
CVE-2020-21468- Updated
- 2026-11-02
EUVDEUVD-2020-14240 No score
A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS). NOTE: the vendor cannot reproduce this issue in a released version, such as 5.0.7.
- Record
EUVD-2020-14240- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-vjmv-w2p6-c95q
A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service ...
A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS).
- Record
GHSA-vjmv-w2p6-c95q- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS). NOTE: the vendor cannot reproduce this issue in a released version, such as 5.0.7.
- Record
CVE-2020-21468- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-21468
A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS). NOTE: the vendor cannot reproduce this issue in a released version, such as 5.0.7.
- Record
DEBIAN-CVE-2020-21468- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
redisDebian:12 |
All versions, plus listed versions 5:7.0.11-15:7.0.11-1+deb12u15:7.0.12-15:7.0.12-25:7.0.13-1 Show 44 moreShow less5:7.0.13-25:7.0.14-15:7.0.14-25:7.0.15-15:7.0.15-1~deb12u15:7.0.15-1~deb12u105:7.0.15-1~deb12u25:7.0.15-1~deb12u35:7.0.15-1~deb12u45:7.0.15-1~deb12u55:7.0.15-1~deb12u65:7.0.15-1~deb12u75:7.0.15-1~deb12u85:7.0.15-1~deb12u95:7.0.15-25:7.0.15-35:7.0.15-3.15:7.2-rc2-15:7.2-rc3-15:7.2.0-15:7.2.0-25:7.2.1-15:7.2.1-25:7.2.2-15:7.2.2-25:7.2.3-15:7.2.4-15:7.2.5-15:7.2.5-25:7.2.5-35:7.2~rc1-15:8.0.0-15:8.0.0-25:8.0.2-25:8.0.2-35:8.0.4-15:8.0.5-15:8.0.6-15:8.0.6-25:8.0.6-35:8.4.0-15:8.6.1-15:8.6.2-15:8.6.3-1 |
None known |
redisDebian:13 |
All versions, plus listed versions 5:8.0.2-35:8.0.2-3+deb13u15:8.0.2-3+deb13u25:8.0.2-3+deb13u35:8.0.4-1 Show 8 moreShow less5:8.0.5-15:8.0.6-15:8.0.6-25:8.0.6-35:8.4.0-15:8.6.1-15:8.6.2-15:8.6.3-1 |
None known |
redisDebian:14 |
All versions, plus listed versions 5:8.0.2-35:8.0.4-15:8.0.5-15:8.0.6-15:8.0.6-2 Show 5 moreShow less5:8.0.6-35:8.4.0-15:8.6.1-15:8.6.2-15:8.6.3-1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-21468 is a high vulnerability (CVSS 7.5) in Redislabs Redis, published September 20, 2021. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 1.20%, the 68th percentile.