{"id":"CVE-2022-24834","aliases":["ALPINE-CVE-2022-24834","ALSA-2025:0595","ALSA-2025:0693","AZL-27477","BELL-CVE-2022-24834","BIT-keydb-2022-24834","BIT-redis-2022-24834","BIT-valkey-2022-24834","CLSA-2026-1777976277","DEBIAN-CVE-2022-24834","DLA-3885-1","DSA-5610-1","EUVD-2022-29620","GHSA-p8x2-9v9q-c838","MGASA-2023-0246","OESA-2023-1458","RHSA-2025:0595","RHSA-2025:0693","RLSA-2025:0595","RLSA-2025:0693","SUSE-SU-2023:2924-1","SUSE-SU-2023:2925-1","SUSE-SU-2023:3407-1","UBUNTU-CVE-2022-24834","USN-6531-1","USN-8169-1","openSUSE-SU-2024:13047-1"],"status":"published","title":"Heap overflow issue with the Lua cjson library used by Redis","description":"Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.41409,"percentile":0.98684,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-122","CWE-680"],"published":"2023-07-13T14:35:41Z","modified":"2026-11-03T08:00:18Z","exploits":[{"source":"pocgithub","id":"convisolabs/CVE-2022-24834","title":"convisolabs/CVE-2022-24834","date":"2023-07-28","url":"https://github.com/convisolabs/CVE-2022-24834"},{"source":"pocgithub","id":"Nullx97/CVE-2022-24834-","title":"Nullx97/CVE-2022-24834-","date":"2024-08-18","url":"https://github.com/Nullx97/CVE-2022-24834-"}],"fixes":[{"ecosystem":"Alpine:v3.16","package":"redis","fixed_in":["7.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"redis","fixed_in":["7.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"redis","fixed_in":["7.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"redis","fixed_in":["7.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"redis","fixed_in":["7.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"redis","fixed_in":["7.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"redis","fixed_in":["7.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"redis","fixed_in":["7.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"redis","fixed_in":["7.0.12-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"redis","fixed_in":["6.2.13-2"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"redis","fixed_in":["7.0.12-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"keydb","fixed_in":["6.0.20","6.2.13","7.0.12"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"redis","fixed_in":["6.0.20","6.2.13","7.0.12"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"valkey","fixed_in":["6.0.20","6.2.13","7.0.12"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"redis","fixed_in":["5:5.0.14-1+deb10u5+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"redis-sentinel","fixed_in":["5:5.0.14-1+deb10u5+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"redis-server","fixed_in":["5:5.0.14-1+deb10u5+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"redis-tools","fixed_in":["5:5.0.14-1+deb10u5+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"redis","fixed_in":["5:7.0.15-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"redis","fixed_in":["5:7.0.12-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"redis","fixed_in":["5:7.0.12-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"redis","fixed_in":["6.0.20-1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"redis","fixed_in":["4.0.11-19.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"redis","fixed_in":["4.0.11-19.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"redis","fixed_in":["4.0.14-6.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"redis","fixed_in":["4.0.14-6.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"redis","fixed_in":["4.0.14-6.oe2203sp2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"redis","fixed_in":["6.2.6-150400.3.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"redis","fixed_in":["6.2.6-150400.3.22.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"redis","fixed_in":["6.2.6-150400.3.22.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"redis","fixed_in":["6.2.6-150400.3.22.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"redis","fixed_in":["2:2.8.4-2ubuntu0.2+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"redis","fixed_in":["2:3.0.6-1ubuntu0.4+esm2","2:3.0.6-1ubuntu0.4+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"redis","fixed_in":["5:4.0.9-1ubuntu0.2+esm4","5:4.0.9-1ubuntu0.2+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"lua-cjson","fixed_in":["2.1.0+dfsg-2.1ubuntu0.20.04.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"redis","fixed_in":["5:5.0.7-2ubuntu0.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"lua-cjson","fixed_in":["2.1.0+dfsg-2.1ubuntu0.22.04.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"redis","fixed_in":["5:6.0.16-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"lua-bitop","fixed_in":["1.0.2-5ubuntu0.20.04.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"lua5.1","fixed_in":["5.1.5-8.1ubuntu0.20.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"lua-bitop","fixed_in":["1.0.2-5ubuntu0.22.04.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"lua5.1","fixed_in":["5.1.5-8.1ubuntu0.22.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"redis","fixed_in":["5:7.0.15-1ubuntu0.24.04.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.0"},{"fixed":"7.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.0"},{"fixed":"7.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.0"},{"fixed":"7.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.0"},{"fixed":"7.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.0"},{"fixed":"7.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.0"},{"fixed":"7.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.0"},{"fixed":"7.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.0"},{"fixed":"7.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.0"},{"fixed":"7.0.12-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.17-1.module_el8.10.0+3946+3de613d5"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.17-1.module_el8.10.0+3946+3de613d5"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.17-1.module_el8.10.0+3946+3de613d5"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.17-1.el9_5"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.17-1.el9_5"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.17-1.el9_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Azure Linux:2","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.13-2"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9-r0"},{"fixed":"7.0.12-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"keydb","ranges":[{"type":"SEMVER","events":[{"introduced":"2.6.0"},{"fixed":"6.0.20"},{"introduced":"6.2.0"},{"fixed":"6.2.13"},{"introduced":"7.0.0"},{"fixed":"7.0.12"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"redis","ranges":[{"type":"SEMVER","events":[{"introduced":"2.6.0"},{"fixed":"6.0.20"},{"introduced":"6.2.0"},{"fixed":"6.2.13"},{"introduced":"7.0.0"},{"fixed":"7.0.12"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"valkey","ranges":[{"type":"SEMVER","events":[{"introduced":"2.6.0"},{"fixed":"6.0.20"},{"introduced":"6.2.0"},{"fixed":"6.2.13"},{"introduced":"7.0.0"},{"fixed":"7.0.12"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.14-1+deb10u5+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"redis-sentinel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.14-1+deb10u5+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"redis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.14-1+deb10u5+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"redis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.14-1+deb10u5+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1~deb12u1"}]}],"versions":["5:7.0.11-1","5:7.0.11-1+deb12u1","5:7.0.12-1","5:7.0.12-2","5:7.0.13-1","5:7.0.13-2","5:7.0.14-1","5:7.0.14-2"]},{"source":"osv","ecosystem":"Debian:13","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.12-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.12-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.16-1+deb11u3"}]}],"versions":["5:6.0.15-1","5:6.0.16-1","5:6.0.16-1+deb11u1","5:6.0.16-1+deb11u2","5:6.0.16-1~bpo10+1","5:6.0.16-1~bpo11+1"],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1~deb12u1"}]}],"versions":["5:7.0.11-1","5:7.0.11-1+deb12u1","5:7.0.12-1","5:7.0.12-2","5:7.0.13-1","5:7.0.13-2","5:7.0.14-1","5:7.0.14-2"],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.20-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.11-19.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.11-19.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.14-6.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.14-6.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.14-6.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.17-1.module+el8.10.0+22680+748527fd"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.17-1.module+el8.10.0+22680+748527fd"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.17-1.module+el8.10.0+22680+748527fd"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.17-1.module+el8.10.0+22680+748527fd"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.17-1.module+el8.10.0+22680+748527fd"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.17-1.el9_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.17-1.el9_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.17-1.el9_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.17-1.el9_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.17-1.el9_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.17-1.module+el8.10.0+1923+5b85c6a7"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.17-1.el9_5"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.22.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.22.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150500.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150500.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.4-2ubuntu0.2+esm3"}]}],"versions":["2:2.6.13-1","2:2.6.16-3","2:2.8.0-1","2:2.8.2-1","2:2.8.4-2","2:2.8.4-2ubuntu0.2","2:2.8.4-2ubuntu0.2+esm1","2:2.8.4-2ubuntu0.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.6-1ubuntu0.4+esm2"}]}],"versions":["2:3.0.3-3","2:3.0.5-1","2:3.0.5-2","2:3.0.5-3","2:3.0.5-4","2:3.0.6-1","2:3.0.6-1ubuntu0.2","2:3.0.6-1ubuntu0.3","2:3.0.6-1ubuntu0.4","2:3.0.6-1ubuntu0.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"lua-cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"lua-cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0+dfsg-2","2.1.0+dfsg-2.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:4.0.9-1ubuntu0.2+esm4"}]}],"versions":["4:4.0.1-7","4:4.0.2-6","4:4.0.2-9","5:4.0.5-1","5:4.0.6-1","5:4.0.6-2","5:4.0.7-1","5:4.0.8-1","5:4.0.8-2","5:4.0.9-1","5:4.0.9-1ubuntu0.1","5:4.0.9-1ubuntu0.2","5:4.0.9-1ubuntu0.2+esm2","5:4.0.9-1ubuntu0.2+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"lua-cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0+dfsg-2.1ubuntu0.20.04.1~esm2"}]}],"versions":["2.1.0+dfsg-2.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.7-2ubuntu0.1+esm2"}]}],"versions":["5:5.0.5-2build1","5:5.0.6-1","5:5.0.7-1","5:5.0.7-2","5:5.0.7-2ubuntu0.1~esm1","5:5.0.7-2ubuntu0.1","5:5.0.7-2ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"lua-cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0+dfsg-2.1ubuntu0.22.04.1~esm2"}]}],"versions":["2.1.0+dfsg-2.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.16-1ubuntu1+esm1"}]}],"versions":["5:6.0.15-1","5:6.0.16-1","5:6.0.16-1build1","5:6.0.16-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"lua-cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0+dfsg-2.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"lua-cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0+dfsg-2.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"lua-cmsgpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.4.0~git20230328.57b1f90-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"lua-cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0+dfsg-4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"lua-cmsgpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.4.0~git20230328.57b1f90-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"lua-cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0+dfsg-2.2","2.1.0+dfsg-4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"lua-cmsgpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.4.0~git20230328.57b1f90-2","0.4.0~git20230328.57b1f90-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.4-2ubuntu0.2+esm3"}]}],"versions":["2:2.6.13-1","2:2.6.16-3","2:2.8.0-1","2:2.8.2-1","2:2.8.4-2","2:2.8.4-2ubuntu0.2","2:2.8.4-2ubuntu0.2+esm1","2:2.8.4-2ubuntu0.2+esm2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.6-1ubuntu0.4+esm2"}]}],"versions":["2:3.0.3-3","2:3.0.5-1","2:3.0.5-2","2:3.0.5-3","2:3.0.5-4","2:3.0.6-1","2:3.0.6-1ubuntu0.2","2:3.0.6-1ubuntu0.3","2:3.0.6-1ubuntu0.4","2:3.0.6-1ubuntu0.4+esm1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:4.0.9-1ubuntu0.2+esm4"}]}],"versions":["4:4.0.1-7","4:4.0.2-6","4:4.0.2-9","5:4.0.5-1","5:4.0.6-1","5:4.0.6-2","5:4.0.7-1","5:4.0.8-1","5:4.0.8-2","5:4.0.9-1","5:4.0.9-1ubuntu0.1","5:4.0.9-1ubuntu0.2","5:4.0.9-1ubuntu0.2+esm2","5:4.0.9-1ubuntu0.2+esm3"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.7-2ubuntu0.1+esm2"}]}],"versions":["5:5.0.5-2build1","5:5.0.6-1","5:5.0.7-1","5:5.0.7-2","5:5.0.7-2ubuntu0.1~esm1","5:5.0.7-2ubuntu0.1","5:5.0.7-2ubuntu0.1+esm1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.16-1ubuntu1+esm1"}]}],"versions":["5:6.0.15-1","5:6.0.16-1","5:6.0.16-1build1","5:6.0.16-1ubuntu1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.6-1ubuntu0.4+esm5"}]}],"versions":["2:3.0.3-3","2:3.0.5-1","2:3.0.5-2","2:3.0.5-3","2:3.0.5-4","2:3.0.6-1","2:3.0.6-1ubuntu0.2","2:3.0.6-1ubuntu0.3","2:3.0.6-1ubuntu0.4","2:3.0.6-1ubuntu0.4+esm1","2:3.0.6-1ubuntu0.4+esm2","2:3.0.6-1ubuntu0.4+esm3","2:3.0.6-1ubuntu0.4+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:4.0.9-1ubuntu0.2+esm7"}]}],"versions":["4:4.0.1-7","4:4.0.2-6","4:4.0.2-9","5:4.0.5-1","5:4.0.6-1","5:4.0.6-2","5:4.0.7-1","5:4.0.8-1","5:4.0.8-2","5:4.0.9-1","5:4.0.9-1ubuntu0.1","5:4.0.9-1ubuntu0.2","5:4.0.9-1ubuntu0.2+esm2","5:4.0.9-1ubuntu0.2+esm3","5:4.0.9-1ubuntu0.2+esm4","5:4.0.9-1ubuntu0.2+esm5","5:4.0.9-1ubuntu0.2+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"lua-bitop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-5ubuntu0.20.04.1~esm2"}]}],"versions":["1.0.2-5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"lua-cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0+dfsg-2.1ubuntu0.20.04.1~esm2"}]}],"versions":["2.1.0+dfsg-2.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"lua5.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.5-8.1ubuntu0.20.04.1~esm1"}]}],"versions":["5.1.5-8.1build3","5.1.5-8.1build4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"lua-bitop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-5ubuntu0.22.04.1~esm2"}]}],"versions":["1.0.2-5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"lua-cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0+dfsg-2.1ubuntu0.22.04.1~esm2"}]}],"versions":["2.1.0+dfsg-2.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"lua5.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.5-8.1ubuntu0.22.04.1~esm1"}]}],"versions":["5.1.5-8.1build4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1ubuntu0.24.04.4"}]}],"versions":["5:7.0.12-1","5:7.0.14-1","5:7.0.14-2","5:7.0.15-1","5:7.0.15-1build1","5:7.0.15-1build2","5:7.0.15-1ubuntu0.24.04.1","5:7.0.15-1ubuntu0.24.04.2","5:7.0.15-1ubuntu0.24.04.3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.12-1.1"}]}],"bundled":2}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"redis","product":"redis"}],"references":[{"url":"https://github.com/redis/redis/security/advisories/GHSA-p8x2-9v9q-c838","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TDNNH2ONMVNBQ6LUIAOAGDNFPKXNST5K/","tags":["x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MIF5MAGYARYUMRFK7PQI7HYXMK2HZE5T/","tags":["x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20230814-0006/","tags":["x_transferred","web","advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-24834","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0595","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24834","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-35977","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-36021","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22458","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25155","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28856","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45145","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-31228","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-31449","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-46981","tags":["report"]},{"url":"https://bugzilla.redhat.com/2163132","tags":["report"]},{"url":"https://bugzilla.redhat.com/2163133","tags":["report"]},{"url":"https://bugzilla.redhat.com/2174305","tags":["report"]},{"url":"https://bugzilla.redhat.com/2174306","tags":["report"]},{"url":"https://bugzilla.redhat.com/2187525","tags":["report"]},{"url":"https://bugzilla.redhat.com/2221662","tags":["report"]},{"url":"https://bugzilla.redhat.com/2244940","tags":["report"]},{"url":"https://bugzilla.redhat.com/2317056","tags":["report"]},{"url":"https://bugzilla.redhat.com/2317058","tags":["report"]},{"url":"https://bugzilla.redhat.com/2336004","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-0595.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0693","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-0693.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24834","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-24834","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1777976277.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24834.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-24834","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0246.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32103","tags":["report"]},{"url":"https://github.com/redis/redis/releases/tag/6.0.20","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1458","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2187525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2221662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244940","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2336004","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-66165","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0595.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24834","tags":["advisory","report"]},{"url":"https://groups.google.com/g/redis-db/c/JDjKS0GubsQ","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-35977","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35977","tags":["advisory"]},{"url":"https://github.com/redis/redis/security/advisories/GHSA-mrcw-fhw9-fj8j","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-36021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36021","tags":["advisory"]},{"url":"https://github.com/redis/redis/commit/dcbfcb916ca1a269b3feef86ee86835294758f84","tags":["article"]},{"url":"https://github.com/redis/redis/security/advisories/GHSA-jr7j-rfj5-8xqv","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22458","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22458","tags":["advisory"]},{"url":"https://github.com/redis/redis/security/advisories/GHSA-r8w2-2m53-gprj","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25155","tags":["advisory"]},{"url":"https://github.com/redis/redis/commit/2a2a582e7cd99ba3b531336b8bd41df2b566e619","tags":["article"]},{"url":"https://github.com/redis/redis/security/advisories/GHSA-x2r7-j9vw-3w83","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28856","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28856","tags":["advisory"]},{"url":"https://github.com/redis/redis/security/advisories/GHSA-hjv8-vjf6-wcr6","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45145","tags":["advisory"]},{"url":"https://github.com/redis/redis/security/advisories/GHSA-ghmp-889m-7cvx","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-31228","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-31228","tags":["advisory"]},{"url":"https://github.com/redis/redis/commit/9317bf64659b33166a943ec03d5d9b954e86afb0","tags":["article"]},{"url":"https://github.com/redis/redis/security/advisories/GHSA-66gq-c942-6976","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-31449","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-31449","tags":["advisory"]},{"url":"https://github.com/redis/redis/commit/1f7c148be2cbacf7d50aa461c58b871e87cc5ed9","tags":["article"]},{"url":"https://github.com/redis/redis/security/advisories/GHSA-whxg-wx83-85p5","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-46981","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46981","tags":["advisory"]},{"url":"https://github.com/redis/redis/releases/tag/6.2.17","tags":["article"]},{"url":"https://github.com/redis/redis/releases/tag/7.2.7","tags":["article"]},{"url":"https://github.com/redis/redis/releases/tag/7.4.2","tags":["article"]},{"url":"https://github.com/redis/redis/security/advisories/GHSA-39h2-x6c4-6w4c","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-26627","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0693.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:0595","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:0693","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232924-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213193","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24834","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232925-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1208790","tags":["report"]},{"url":"https://bugzilla.suse.com/1208793","tags":["report"]},{"url":"https://bugzilla.suse.com/1209528","tags":["report"]},{"url":"https://bugzilla.suse.com/1210548","tags":["report"]},{"url":"https://bugzilla.suse.com/1213249","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-36824","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233407-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-24834","tags":["report"]},{"url":"https://raw.githubusercontent.com/redis/redis/7.0/00-RELEASENOTES","tags":["report"]},{"url":"https://github.com/redis/redis/commit/936cfa464f371666c46bff59f7c4247d48973ec6","tags":["report"]},{"url":"https://github.com/redis/redis/commit/f6a7c9f9ec9354702cc3143310a24bf3d1507b03","tags":["report"]},{"url":"https://github.com/redis/redis/pull/12398","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6531-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8169-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-35977","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-36021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-25155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-28856","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-31449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-49844","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-24834","title":"Heap overflow issue with the Lua cjson library used by Redis","description":"Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.","status":"published","published":"2023-07-13T14:35:41.181Z","modified":"2025-02-13T16:32:24.785Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122","CWE-680"],"updated_at":"2026-11-02T14:34:34.576287Z"}],"euvd":[{"id":"EUVD-2022-29620","description":"Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.","status":"published","published":"2023-07-13T14:35:41Z","modified":"2025-02-13T16:32:24Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:03:52.752782Z"}],"nvd":[{"id":"CVE-2022-24834","description":"Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.","status":"published","published":"2023-07-13T15:15:08.817Z","modified":"2026-06-17T04:32:37.48Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-122","CWE-680"],"updated_at":"2026-11-02T14:07:38.721429Z"}],"osv":[{"id":"ALPINE-CVE-2022-24834","description":"Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.","status":"published","published":"2023-07-13T15:15:08.817Z","modified":"2026-11-03T07:30:14.903572991Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"AZL-27477","title":"CVE-2022-24834 affecting package redis for versions less than 6.2.13-2","description":"Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.","status":"published","published":"2023-07-13T15:15:08Z","modified":"2026-04-21T04:24:20.811203Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2022-24834","status":"published","published":"2023-08-31T12:16:15.310975Z","modified":"2026-01-26T09:32:14.280644Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-24834","title":"Heap overflow issue with the Lua cjson library used by Redis","description":"Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.","status":"published","published":"2023-07-13T14:35:41.181Z","modified":"2026-10-28T02:30:32.153776338Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122","CWE-680"],"updated_at":"2026-11-02T15:44:24.428403Z"},{"id":"DEBIAN-CVE-2022-24834","description":"Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.","status":"published","published":"2023-07-13T15:15:08.817Z","modified":"2026-11-03T08:00:18.774245597Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:15.646766Z"},{"id":"OESA-2023-1458","title":"redis security update","description":"Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes,lists, sets anorted sets.\r\n\r\nSecurity Fix(es):\r\n\r\nRedis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.(CVE-2022-24834)","status":"published","published":"2023-08-06T11:05:55Z","modified":"2026-08-18T01:17:47.199360995Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2025:0595","title":"Red Hat Security Advisory: redis:6 security update","status":"published","published":"2025-01-23T10:02:39Z","modified":"2026-10-16T10:06:02Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:0693","title":"Red Hat Security Advisory: redis security update","status":"published","published":"2025-01-28T10:10:05Z","modified":"2026-10-16T10:06:07Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RLSA-2025:0595","title":"Important: redis:6 security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands may lead to denial-of-service (CVE-2023-22458)\n\n* redis: Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands may result with false OOM panic (CVE-2022-35977)\n\n* redis: Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow (CVE-2022-36021)\n\n* redis: String matching commands (like SCAN or KEYS) with a specially crafted pattern to trigger a denial-of-service attack (CVE-2023-25155)\n\n* redis: Insufficient validation of HINCRBYFLOAT command (CVE-2023-28856)\n\n* redis: heap overflow in the lua cjson and cmsgpack libraries (CVE-2022-24834)\n\n* redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145)\n\n* redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449)\n\n* redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228)\n\n* redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-02-13T20:34:26.141542Z","modified":"2026-02-04T18:15:09.62632Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2022-24834","description":"Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.","status":"published","published":"2023-07-13T15:15:00Z","modified":"2026-10-17T12:56:21.373183163Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"ALSA-2025:0595","title":"Important: redis:6 security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  \n\nSecurity Fix(es):  \n\n  * redis: Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands may lead to denial-of-service (CVE-2023-22458)\n  * redis: Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands may result with false OOM panic (CVE-2022-35977)\n  * redis: Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow (CVE-2022-36021)\n  * redis: String matching commands (like SCAN or KEYS) with a specially crafted pattern to trigger a denial-of-service attack (CVE-2023-25155)\n  * redis: Insufficient validation of HINCRBYFLOAT command (CVE-2023-28856)\n  * redis: heap overflow in the lua cjson and cmsgpack libraries (CVE-2022-24834)\n  * redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145)\n  * redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449)\n  * redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228)\n  * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-01-22T00:00:00Z","modified":"2026-10-29T11:02:22.119908794Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:0693","title":"Important: redis security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  \n\nSecurity Fix(es):  \n\n  * redis: heap overflow in the lua cjson and cmsgpack libraries (CVE-2022-24834)\n  * redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145)\n  * redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449)\n  * redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228)\n  * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-01-27T00:00:00Z","modified":"2026-10-29T11:32:12.41650709Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"BIT-keydb-2022-24834","title":"Heap overflow issue with the Lua cjson library used by Redis","description":"Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.","status":"published","published":"2024-08-22T19:27:04.151Z","modified":"2026-09-08T08:48:07.316265067Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-redis-2022-24834","title":"Heap overflow issue with the Lua cjson library used by Redis","description":"Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.","status":"published","published":"2024-03-06T11:06:06.8Z","modified":"2026-09-08T08:48:19.213689577Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"BIT-valkey-2022-24834","title":"Heap overflow issue with the Lua cjson library used by Redis","description":"Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.","status":"published","published":"2024-08-22T19:44:16.255Z","modified":"2025-10-14T19:13:24.985757Z","updated_at":"2026-11-02T15:28:36.104787Z"},{"id":"CLSA-2026-1777976277","title":"Fix CVE(s): CVE-2022-24834","description":"   * SECURITY UPDATE: Integer overflow in Lua cmsgpack library\n     - debian/patches/CVE-2022-24834.patch: partial backport hardening\n       deps/lua/src/lua_cmsgpack.c against integer overflows in mp_buf_append\n       and the encode/decode helpers (cmsgpack-only; the cjson half of the\n       upstream fix is dead code under USE_SYSTEM_LUA=yes and is tracked via\n       the lua-cjson source package)\n     - CVE-2022-24834","status":"published","published":"2026-05-20T10:32:56Z","modified":"2026-06-04T10:03:54.142814Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"DLA-3885-1","title":"redis - security update","status":"published","published":"2024-09-10T00:00:00Z","modified":"2026-03-09T01:19:49.124344Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5610-1","title":"redis - security update","status":"published","published":"2024-01-29T00:00:00Z","modified":"2026-03-09T02:11:43.109577Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2023-0246","title":"Updated redis packages fix security vulnerability","description":"A specially crafted Lua script executing in Redis can trigger a heap\noverflow in the cjson and cmsgpack libraries, and result in heap\ncorruption and potentially remote code execution. (CVE-2022-24834)\n","status":"published","published":"2023-08-23T19:56:41Z","modified":"2026-04-16T04:44:40.182412253Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:13047-1","title":"redis-7.0.12-1.1 on GA media","description":"These are all security issues fixed in the redis-7.0.12-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:19:52.657496Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"RLSA-2025:0693","title":"Important: redis security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: heap overflow in the lua cjson and cmsgpack libraries (CVE-2022-24834)\n\n* redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145)\n\n* redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449)\n\n* redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228)\n\n* redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-03-17T20:16:49.937392Z","modified":"2026-02-04T13:45:09.088789Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"SUSE-SU-2023:2924-1","title":"Security update for redis","description":"This update for redis fixes the following issues:\n\n  - CVE-2022-24834: Fixed heap overflow in the cjson and cmsgpack libraries (bsc#1213193).\n","status":"published","published":"2023-07-20T19:33:59Z","modified":"2026-02-04T03:37:14.3549Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2925-1","title":"Security update for redis7","description":"This update for redis7 fixes the following issues:\n\n  - CVE-2022-24834: Fixed heap overflow in the cjson and cmsgpack libraries (bsc#1213193).\n  - CVE-2023-28856: Fixed HINCRBYFLOAT invalid key crash (bsc#1210548).\n  - CVE-2022-36021: Fixed integer overflow via Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD (bsc#1208790).\n  - CVE-2023-25155: Fixed Integer Overflow in RAND commands (bsc#1208793).\n  - CVE-2023-28425: Fixed denial-of-service via Specially crafted MSETNX command (bsc#1209528).\n  - CVE-2023-36824: Fixed heap overflow in COMMAND GETKEYS and ACL evaluation (bsc#1213249).\n","status":"published","published":"2023-07-20T19:34:11Z","modified":"2026-02-04T03:15:19.67299Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3407-1","title":"Security update for redis","description":"This update for redis fixes the following issues:\n\n- CVE-2023-28856: Fixed possible DoS when using HINCRBYFLOAT to create an hash field. (bsc#1210548)\n- CVE-2022-24834: Fixed a heap overflow in the cjson and cmsgpack libraries. (bsc#1213193)\n","status":"published","published":"2023-08-23T18:08:28Z","modified":"2026-02-04T02:49:44.977599Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"USN-6531-1","title":"redis vulnerabilities","description":"Seiya Nakata and Yudai Fujiwara discovered that Redis incorrectly handled\ncertain specially crafted Lua scripts. An attacker could possibly use this\nissue to cause heap corruption and execute arbitrary code.\n(CVE-2022-24834)\n\nSeungHyun Lee discovered that Redis incorrectly handled specially crafted\ncommands. An attacker could possibly use this issue to trigger an integer\noverflow, which might cause Redis to allocate impossible amounts of memory,\nresulting in a denial of service via an application crash. (CVE-2022-35977)\n\nTom Levy discovered that Redis incorrectly handled crafted string matching\npatterns. An attacker could possibly use this issue to cause Redis to hang,\nresulting in a denial of service. (CVE-2022-36021)\n\nYupeng Yang discovered that Redis incorrectly handled specially crafted\ncommands. An attacker could possibly use this issue to trigger an integer\noverflow, resulting in a denial of service via an application crash.\n(CVE-2023-25155)\n\nIt was discovered that Redis incorrectly handled a specially crafted\ncommand. An attacker could possibly use this issue to create an invalid\nhash field, which could potentially cause Redis to crash on future access.\n(CVE-2023-28856)\n\nAlexander Aleksandrovič Klimov discovered that Redis incorrectly listened\nto a Unix socket before setting proper permissions. A local attacker could\npossibly use this issue to connect, bypassing intended permissions.\n(CVE-2023-45145)\n","status":"published","published":"2023-12-05T16:35:31Z","modified":"2026-06-29T13:51:00.478762948Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-8169-1","title":"redis, lua5.1, lua-cjson, lua-bitop vulnerabilities","description":"It was discovered that Redis incorrectly handled certain specially crafted\nLua scripts. A remote attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. This issue was only addressed in\nlua5.1 on Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2025-49844)\n\nIt was discovered that Redis incorrectly handled certain specially crafted\nLua scripts. A remote attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. This issue was only addressed in\nlua-bitop on Ubuntu 20.04 LTS and Ubuntu 22.04 LTS and in redis on Ubuntu\n16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 24.04 LTS. (CVE-2024-31449)\n\nSeiya Nakata and Yudai Fujiwara discovered that Redis incorrectly handled\ncertain specially crafted Lua scripts. An attacker could possibly use this\nissue to cause heap corruption and execute arbitrary code. This issue was only\naddressed in lua-cjson on Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-24834)","status":"published","published":"2026-04-13T13:18:43Z","modified":"2026-06-25T13:32:32.084923188Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}