{"id":"CVE-2025-48367","aliases":["ALPINE-CVE-2025-48367","ALSA-2025:11401","ALSA-2025:12006","ALSA-2025:12008","AZL-64809","AZL-64827","BELL-CVE-2025-48367","BIT-keydb-2025-48367","BIT-redis-2025-48367","BIT-valkey-2025-48367","CLSA-2025-1755886747","CLSA-2026-1788372462","DEBIAN-CVE-2025-48367","DLA-4240-1","DSA-5969-1","EUVD-2025-20232","GHSA-4q32-c38c-pwgq","MGASA-2025-0211","OESA-2025-1850","OESA-2025-2837","OESA-2025-2838","OESA-2025-2839","OESA-2025-2840","OESA-2025-2841","OESA-2025-2862","RHSA-2025:11401","RHSA-2025:11453","RHSA-2025:12006","RHSA-2025:12008","RHSA-2025:12468","RHSA-2025:12478","RHSA-2025:12524","RHSA-2025:12768","RHSA-2025:12769","RHSA-2025:12789","RHSA-2025:12892","RLSA-2025:11401","RLSA-2025:11453","RLSA-2025:12006","RLSA-2025:12008","SUSE-SU-2025:02579-1","SUSE-SU-2025:02593-1","SUSE-SU-2025:02594-1","SUSE-SU-2025:02679-1","SUSE-SU-2025:02680-1","SUSE-SU-2025:02681-1","SUSE-SU-2025:03073-1","UBUNTU-CVE-2025-48367","openSUSE-SU-2025:15318-1","openSUSE-SU-2025:15359-1"],"status":"published","title":"Redis DoS Vulnerability due to bad connection error handling","description":"Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01191,"percentile":0.6817,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2025-07-07T00:00:00Z","modified":"2026-11-09T12:49:26Z","fixes":[{"ecosystem":"Alpine:v3.22","package":"redict","fixed_in":["7.3.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"redict","fixed_in":["7.3.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"redict","fixed_in":["7.3.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"redis","fixed_in":["7.2.11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"redis","fixed_in":["8.0.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"redis","fixed_in":["8.0.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"redis","fixed_in":["8.0.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"valkey","fixed_in":["7.2.11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"valkey","fixed_in":["7.2.11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"valkey","fixed_in":["8.1.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"valkey","fixed_in":["8.1.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"valkey","fixed_in":["8.1.1-r2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"redis","fixed_in":["6.2.18-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"valkey","fixed_in":["8.0.4-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"redis","fixed_in":["7.0.15-r5"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"redis","fixed_in":["8.0.3-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"redis","fixed_in":["8.0.3-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"keydb","fixed_in":["6.2.19","7.2.10","8.0.3","7.4.5"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"redis","fixed_in":["6.2.19","7.2.10","8.0.3","7.4.5"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"valkey","fixed_in":["7.2.10","8.0.4","8.1.3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis","fixed_in":["6.2.7-1.el9.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-devel","fixed_in":["6.2.7-1.el9.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-doc","fixed_in":["6.2.7-1.el9.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"redict","fixed_in":["7.3.5+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"redis","fixed_in":["5:7.0.15-1~deb12u5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"redis","fixed_in":["5:8.0.2-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"redis","fixed_in":["5:8.0.2-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"valkey","fixed_in":["8.1.1+dfsg1-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"valkey","fixed_in":["8.1.1+dfsg1-3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"valkey","fixed_in":["7.2.11+dfsg1-0ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.22","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0"},{"fixed":"7.2.11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0"},{"fixed":"8.0.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0"},{"fixed":"8.0.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0"},{"fixed":"8.0.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1-r2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.4-1.el10_0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"valkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.4-1.el10_0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.19-1.module_el8.10.0+4030+0c7fcc00"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.19-1.module_el8.10.0+4030+0c7fcc00"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.19-1.module_el8.10.0+4030+0c7fcc00"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.10-1.module_el9.6.0+173+efaf9205"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.10-1.module_el9.6.0+173+efaf9205"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.10-1.module_el9.6.0+173+efaf9205"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.18-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.4-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9-r0"},{"fixed":"7.0.15-r5"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.2-r0"},{"fixed":"8.0.3-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9-r0"},{"fixed":"8.0.3-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"keydb","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.2.19"},{"introduced":"7.0.0"},{"fixed":"7.2.10"},{"introduced":"8.0.0"},{"fixed":"8.0.3"},{"introduced":"7.4.0"},{"fixed":"7.4.5"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"redis","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.2.19"},{"introduced":"7.0.0"},{"fixed":"7.2.10"},{"introduced":"8.0.0"},{"fixed":"8.0.3"},{"introduced":"7.4.0"},{"fixed":"7.4.5"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"valkey","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.2.10"},{"introduced":"7.3.0"},{"fixed":"8.0.4"},{"introduced":"8.1.0"},{"fixed":"8.1.3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7-1.el9.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7-1.el9.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7-1.el9.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.14-1+deb10u5+tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"redis-sentinel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.14-1+deb10u5+tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"redis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.14-1+deb10u5+tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"redis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.14-1+deb10u5+tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:14","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.5+ds-1"}]}],"versions":["7.3.0+ds-1","7.3.0+ds-2","7.3.0+ds-3","7.3.0+ds-3~bpo12+1","7.3.1+ds-1","7.3.2+ds-1","7.3.2+ds-1~bpo12+1","7.3.5+ds-1~bpo12+1"]},{"source":"osv","ecosystem":"Debian:12","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1~deb12u5"}]}],"versions":["5:7.0.11-1","5:7.0.11-1+deb12u1","5:7.0.12-1","5:7.0.12-2","5:7.0.13-1","5:7.0.13-2","5:7.0.14-1","5:7.0.14-2","5:7.0.15-1~deb12u1","5:7.0.15-1~deb12u2","5:7.0.15-1~deb12u3","5:7.0.15-1~deb12u4"]},{"source":"osv","ecosystem":"Debian:13","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:8.0.2-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:8.0.2-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1+dfsg1-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1+dfsg1-3"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.16-1+deb11u7"}]}],"versions":["5:6.0.15-1","5:6.0.16-1","5:6.0.16-1+deb11u1","5:6.0.16-1+deb11u2","5:6.0.16-1+deb11u3","5:6.0.16-1+deb11u4","5:6.0.16-1+deb11u5","5:6.0.16-1+deb11u6","5:6.0.16-1~bpo10+1","5:6.0.16-1~bpo11+1"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1~deb12u5"}]}],"versions":["5:7.0.11-1","5:7.0.11-1+deb12u1","5:7.0.12-1","5:7.0.12-2","5:7.0.13-1","5:7.0.13-2","5:7.0.14-1","5:7.0.14-2","5:7.0.15-1~deb12u1","5:7.0.15-1~deb12u2","5:7.0.15-1~deb12u3","5:7.0.15-1~deb12u4"],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.10-1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.10-1.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.10-1.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.10-1.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.10-1.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.10-1.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.10-1.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"redis6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7-6.oe2403sp1"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"redis6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7-4.oe2003sp4"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"redis6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7-6.oe2203sp3"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"redis6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7-6.oe2203sp4"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"redis6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7-6.oe2403"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"redis6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7-6.oe2403sp2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-1.el10_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"valkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-1.el10_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"valkey-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-1.el10_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"valkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-1.el10_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.19-1.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.19-1.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.19-1.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.19-1.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.19-1.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.19-1.module+el8.10.0+23330+19e91c41"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.19-1.module+el8.10.0+23330+19e91c41"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.19-1.module+el8.10.0+23330+19e91c41"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.19-1.module+el8.10.0+23330+19e91c41"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.19-1.module+el8.10.0+23330+19e91c41"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.10-1.module+el9.6.0+23332+115a3b01"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.10-1.module+el9.6.0+23332+115a3b01"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.10-1.module+el9.6.0+23332+115a3b01"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.10-1.module+el9.6.0+23332+115a3b01"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.10-1.module+el9.6.0+23332+115a3b01"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.6-1.el9_0.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.6-1.el9_0.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.6-1.el9_0.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.6-1.el9_0.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.6-1.el9_0.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+23374+eaf5d181.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+23374+eaf5d181.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+23374+eaf5d181.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+23374+eaf5d181.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+23374+eaf5d181.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+23374+eaf5d181.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+23374+eaf5d181.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+23374+eaf5d181.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+23374+eaf5d181.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+23374+eaf5d181.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+23376+7886a418.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+23377+dd45ab91.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+23377+dd45ab91.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+23377+dd45ab91.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+23377+dd45ab91.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+23377+dd45ab91.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+23377+dd45ab91.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+23377+dd45ab91.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+23377+dd45ab91.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+23377+dd45ab91.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+23377+dd45ab91.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-1.module+el9.4.0+23373+8ffc5ebb.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-1.module+el9.4.0+23373+8ffc5ebb.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-1.module+el9.4.0+23373+8ffc5ebb.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-1.module+el9.4.0+23373+8ffc5ebb.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-1.module+el9.4.0+23373+8ffc5ebb.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:10","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-1.el10_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.19-1.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.19-1.module+el8.10.0+2013+383ef3e1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.10-1.module+el9.6.0+32323+e27e860a"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-150200.6.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2-150600.13.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2-150600.13.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2-150700.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150600.8.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150600.8.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150500.3.21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150500.3.21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150500.3.21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150500.3.21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.4-150600.3.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.4-150600.3.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.6.13-1","2:2.6.16-3","2:2.8.0-1","2:2.8.2-1","2:2.8.4-2","2:2.8.4-2ubuntu0.2","2:2.8.4-2ubuntu0.2+esm1","2:2.8.4-2ubuntu0.2+esm2","2:2.8.4-2ubuntu0.2+esm3","2:2.8.4-2ubuntu0.2+esm4","2:2.8.4-2ubuntu0.2+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:3.0.3-3","2:3.0.5-1","2:3.0.5-2","2:3.0.5-3","2:3.0.5-4","2:3.0.6-1","2:3.0.6-1ubuntu0.2","2:3.0.6-1ubuntu0.3","2:3.0.6-1ubuntu0.4","2:3.0.6-1ubuntu0.4+esm1","2:3.0.6-1ubuntu0.4+esm2","2:3.0.6-1ubuntu0.4+esm3","2:3.0.6-1ubuntu0.4+esm4","2:3.0.6-1ubuntu0.4+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4:4.0.1-7","4:4.0.2-6","4:4.0.2-9","5:4.0.5-1","5:4.0.6-1","5:4.0.6-2","5:4.0.7-1","5:4.0.8-1","5:4.0.8-2","5:4.0.9-1","5:4.0.9-1ubuntu0.1","5:4.0.9-1ubuntu0.2","5:4.0.9-1ubuntu0.2+esm2","5:4.0.9-1ubuntu0.2+esm3","5:4.0.9-1ubuntu0.2+esm4","5:4.0.9-1ubuntu0.2+esm5","5:4.0.9-1ubuntu0.2+esm6","5:4.0.9-1ubuntu0.2+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:5.0.5-2build1","5:5.0.6-1","5:5.0.7-1","5:5.0.7-2","5:5.0.7-2ubuntu0.1~esm1","5:5.0.7-2ubuntu0.1","5:5.0.7-2ubuntu0.1+esm1","5:5.0.7-2ubuntu0.1+esm2","5:5.0.7-2ubuntu0.1+esm3","5:5.0.7-2ubuntu0.1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:6.0.15-1","5:6.0.16-1","5:6.0.16-1build1","5:6.0.16-1ubuntu1","5:6.0.16-1ubuntu1+esm1","5:6.0.16-1ubuntu1+esm2","5:6.0.16-1ubuntu1.1","5:6.0.16-1ubuntu1.1+esm1","5:6.0.16-1ubuntu1.2","5:6.0.16-1ubuntu1.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:7.0.12-1","5:7.0.14-1","5:7.0.14-2","5:7.0.15-1","5:7.0.15-1build1","5:7.0.15-1build2","5:7.0.15-1ubuntu0.24.04.1","5:7.0.15-1ubuntu0.24.04.2","5:7.0.15-1ubuntu0.24.04.3","5:7.0.15-1ubuntu0.24.04.4","5:7.0.15-1ubuntu0.24.04.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.11+dfsg1-0ubuntu0.2"}]}],"versions":["7.2.5+dfsg1-2ubuntu4~24.04.1","7.2.7+dfsg1-0ubuntu0.24.04.1","7.2.8+dfsg1-0ubuntu0.24.04.1","7.2.8+dfsg1-0ubuntu0.24.04.2","7.2.8+dfsg1-0ubuntu0.24.04.3","7.2.10+dfsg1-0ubuntu0.1","7.2.11+dfsg1-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.2+ds-1","7.3.5+ds-1","7.3.5+ds-1ubuntu0.1","7.3.5+ds-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:7.0.15-3","5:7.0.15-3.1","5:8.0.2-3","5:8.0.2-3build1","5:8.0.2-3ubuntu0.25.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.6+ds-1","7.3.6+ds-2","7.3.6+ds-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:8.0.5-1","5:8.0.6-2","5:8.0.6-2build1","5:8.0.6-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:8.0.2-3build1","5:8.0.2-3ubuntu0.25.10.1","5:8.0.5-1","5:8.0.5-1ubuntu0.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.3-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-1.1"}]}],"bundled":2}],"products":[{"vendor":"redis","product":"redis"}],"references":[{"url":"https://github.com/redis/redis/security/advisories/GHSA-4q32-c38c-pwgq","tags":["x_refsource_CONFIRM","Third Party Advisory","advisory","article","report"]},{"url":"https://github.com/redis/redis/commit/bde62951accfc4bb0a516276fd0b4b307e140ce2","tags":["x_refsource_MISC","Patch","fix","article","report"]},{"url":"https://github.com/redis/redis/releases/tag/6.2.19","tags":["x_refsource_MISC","Release Notes","article","web","report"]},{"url":"https://github.com/redis/redis/releases/tag/7.2.10","tags":["x_refsource_MISC","Release Notes","article","web","report"]},{"url":"https://github.com/redis/redis/releases/tag/7.4.5","tags":["x_refsource_MISC","Release Notes","article","web","report"]},{"url":"https://github.com/redis/redis/releases/tag/8.0.3","tags":["x_refsource_MISC","Release Notes","article","web","report"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-48367","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:11401","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-27151","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32023","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-48367","tags":["report"]},{"url":"https://bugzilla.redhat.com/2369153","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-11401.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:12006","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-12006.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:12008","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-12008.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48367","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-48367","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1755886747.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1788372462.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21605","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66373","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/48xxx/CVE-2025-48367.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-48367","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0211.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34452","tags":["report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1850","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32023","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2837","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46817","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46818","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46819","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49844","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2838","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2839","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2840","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2841","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2862","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2376857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2376858","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11401.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27151","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27151","tags":["advisory"]},{"url":"https://github.com/redis/redis/commit/643b5db235cb82508e72f11c7b4bbfc7dc39be56","tags":["article"]},{"url":"https://github.com/redis/redis/releases/tag/8.0.2","tags":["article"]},{"url":"https://github.com/redis/redis/security/advisories/GHSA-5453-q98w-cmvm","tags":["article"]},{"url":"https://github.com/valkey-io/valkey/releases","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32023","tags":["advisory"]},{"url":"https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445","tags":["article"]},{"url":"https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-48367","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2025:11453","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11453.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12006.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12008.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:12468","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12468.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:12478","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12478.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:12524","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12524.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:12768","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12768.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:12769","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12769.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:12789","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12789.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:12892","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12892.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:11401","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:11453","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:12006","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:12008","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502579-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1244795","tags":["report"]},{"url":"https://bugzilla.suse.com/1246058","tags":["report"]},{"url":"https://bugzilla.suse.com/1246059","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48367","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502593-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502594-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502679-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243804","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27151","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502680-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502681-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503073-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-48367","tags":["report"]},{"url":"https://codeberg.org/redict/redict/issues/105","tags":["report"]},{"url":"https://github.com/valkey-io/valkey/pull/2315","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-48367","title":"Redis DoS Vulnerability due to bad connection error handling","description":"Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.","status":"published","published":"2025-07-07T15:25:47.69Z","modified":"2025-07-07T15:39:11.003Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:32:41.41198Z"}],"euvd":[{"id":"EUVD-2025-20232","description":"Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.","status":"published","published":"2025-07-07T15:25:47Z","modified":"2025-07-07T15:39:11Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:13.402869Z"}],"nvd":[{"id":"CVE-2025-48367","description":"Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.","status":"published","published":"2025-07-07T16:15:24.063Z","modified":"2026-06-17T09:29:33.337Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:11:16.997062Z"}],"osv":[{"id":"ALPINE-CVE-2025-48367","description":"Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.","status":"published","published":"2025-07-07T16:15:24.063Z","modified":"2026-11-03T06:32:15.309019004Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"BELL-CVE-2025-48367","status":"published","published":"2025-07-08T09:13:56.192765Z","modified":"2026-01-26T09:40:29.128161Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:22.495824Z"},{"id":"CVE-2025-48367","title":"Redis DoS Vulnerability due to bad connection error handling","description":"Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.","status":"published","published":"2025-07-07T15:25:47.69Z","modified":"2026-10-28T11:01:50.944789287Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:44:50.037003Z"},{"id":"DEBIAN-CVE-2025-48367","description":"Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.","status":"published","published":"2025-07-07T16:15:24.063Z","modified":"2026-09-01T20:03:36.342733239Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"OESA-2025-1850","title":"redis security update","description":"Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets.\r\n\r\nSecurity Fix(es):\n\nRedis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing hyperloglog operations. This can be done using ACL to restrict HLL commands.(CVE-2025-32023)\n\nRedis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.(CVE-2025-48367)","status":"published","published":"2025-07-18T11:08:56Z","modified":"2026-08-18T01:18:54.159789622Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2837","title":"redis6 security update","description":"Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Redis works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Redis also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Redis behave like a cache. You can use Redis from most programming languages also.\r\n\r\nSecurity Fix(es):\n\nRedis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted and the memory is unavailable. When password authentication is enabled on the Redis server, but no password is provided, the client can still cause the output buffer to grow from \u0026quot;NOAUTH\u0026quot; responses until the system will run out of memory. This issue has been patched in version 7.4.3. An additional workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in different ways. Either using network access control tools like firewalls, iptables, security groups, etc, or enabling TLS and requiring users to authenticate using client side certificates.(CVE-2025-21605)\n\nRedis is an open source, in-memory database that persists on disk. From version 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.(CVE-2025-32023)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.(CVE-2025-46817)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions of Redis with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing LUA scripts. This can be done using ACL to block a script by restricting both the EVAL and FUNCTION command families.(CVE-2025-46818)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua scripting.(CVE-2025-46819)\n\nRedis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.(CVE-2025-48367)\n\nAn authenticated user may use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting.(CVE-2025-49844)","status":"published","published":"2025-12-12T11:09:58Z","modified":"2026-08-18T01:19:23.148940403Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2025-2838","title":"redis6 security update","description":"Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Redis works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Redis also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Redis behave like a cache. You can use Redis from most programming languages also.\r\n\r\nSecurity Fix(es):\n\nRedis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted and the memory is unavailable. When password authentication is enabled on the Redis server, but no password is provided, the client can still cause the output buffer to grow from \u0026quot;NOAUTH\u0026quot; responses until the system will run out of memory. This issue has been patched in version 7.4.3. An additional workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in different ways. Either using network access control tools like firewalls, iptables, security groups, etc, or enabling TLS and requiring users to authenticate using client side certificates.(CVE-2025-21605)\n\nRedis is an open source, in-memory database that persists on disk. From version 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.(CVE-2025-32023)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.(CVE-2025-46817)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions of Redis with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing LUA scripts. This can be done using ACL to block a script by restricting both the EVAL and FUNCTION command families.(CVE-2025-46818)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua scripting.(CVE-2025-46819)\n\nRedis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.(CVE-2025-48367)\n\nAn authenticated user may use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting.(CVE-2025-49844)","status":"published","published":"2025-12-12T11:09:58Z","modified":"2026-08-18T01:19:23.168734781Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2025-2839","title":"redis6 security update","description":"Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Redis works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Redis also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Redis behave like a cache. You can use Redis from most programming languages also.\r\n\r\nSecurity Fix(es):\n\nRedis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted and the memory is unavailable. When password authentication is enabled on the Redis server, but no password is provided, the client can still cause the output buffer to grow from \u0026quot;NOAUTH\u0026quot; responses until the system will run out of memory. This issue has been patched in version 7.4.3. An additional workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in different ways. Either using network access control tools like firewalls, iptables, security groups, etc, or enabling TLS and requiring users to authenticate using client side certificates.(CVE-2025-21605)\n\nRedis is an open source, in-memory database that persists on disk. From version 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.(CVE-2025-32023)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.(CVE-2025-46817)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions of Redis with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing LUA scripts. This can be done using ACL to block a script by restricting both the EVAL and FUNCTION command families.(CVE-2025-46818)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua scripting.(CVE-2025-46819)\n\nRedis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.(CVE-2025-48367)\n\nAn authenticated user may use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting.(CVE-2025-49844)","status":"published","published":"2025-12-12T11:09:58Z","modified":"2026-08-18T01:19:23.532149027Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2025-2840","title":"redis6 security update","description":"Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Redis works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Redis also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Redis behave like a cache. You can use Redis from most programming languages also.\r\n\r\nSecurity Fix(es):\n\nRedis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted and the memory is unavailable. When password authentication is enabled on the Redis server, but no password is provided, the client can still cause the output buffer to grow from \u0026quot;NOAUTH\u0026quot; responses until the system will run out of memory. This issue has been patched in version 7.4.3. An additional workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in different ways. Either using network access control tools like firewalls, iptables, security groups, etc, or enabling TLS and requiring users to authenticate using client side certificates.(CVE-2025-21605)\n\nRedis is an open source, in-memory database that persists on disk. From version 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.(CVE-2025-32023)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.(CVE-2025-46817)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions of Redis with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing LUA scripts. This can be done using ACL to block a script by restricting both the EVAL and FUNCTION command families.(CVE-2025-46818)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua scripting.(CVE-2025-46819)\n\nRedis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.(CVE-2025-48367)\n\nAn authenticated user may use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting.(CVE-2025-49844)","status":"published","published":"2025-12-12T11:09:58Z","modified":"2026-08-18T01:19:23.179223022Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2025-2841","title":"redis6 security update","description":"Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Redis works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Redis also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Redis behave like a cache. You can use Redis from most programming languages also.\r\n\r\nSecurity Fix(es):\n\nRedis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted and the memory is unavailable. When password authentication is enabled on the Redis server, but no password is provided, the client can still cause the output buffer to grow from \u0026quot;NOAUTH\u0026quot; responses until the system will run out of memory. This issue has been patched in version 7.4.3. An additional workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in different ways. Either using network access control tools like firewalls, iptables, security groups, etc, or enabling TLS and requiring users to authenticate using client side certificates.(CVE-2025-21605)\n\nRedis is an open source, in-memory database that persists on disk. From version 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.(CVE-2025-32023)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.(CVE-2025-46817)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions of Redis with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing LUA scripts. This can be done using ACL to block a script by restricting both the EVAL and FUNCTION command families.(CVE-2025-46818)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua scripting.(CVE-2025-46819)\n\nRedis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.(CVE-2025-48367)\n\nAn authenticated user may use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting.(CVE-2025-49844)","status":"published","published":"2025-12-12T11:09:58Z","modified":"2026-08-18T01:19:23.517101549Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2025-2862","title":"redis6 security update","description":"Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Redis works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Redis also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Redis behave like a cache. You can use Redis from most programming languages also.\r\n\r\nSecurity Fix(es):\n\nRedis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted and the memory is unavailable. When password authentication is enabled on the Redis server, but no password is provided, the client can still cause the output buffer to grow from \u0026quot;NOAUTH\u0026quot; responses until the system will run out of memory. This issue has been patched in version 7.4.3. An additional workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in different ways. Either using network access control tools like firewalls, iptables, security groups, etc, or enabling TLS and requiring users to authenticate using client side certificates.(CVE-2025-21605)\n\nRedis is an open source, in-memory database that persists on disk. From version 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.(CVE-2025-32023)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.(CVE-2025-46817)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions of Redis with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing LUA scripts. This can be done using ACL to block a script by restricting both the EVAL and FUNCTION command families.(CVE-2025-46818)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua scripting.(CVE-2025-46819)\n\nRedis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.(CVE-2025-48367)","status":"published","published":"2025-12-30T11:09:59Z","modified":"2026-08-18T01:19:24.147679927Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"RHSA-2025:11401","title":"Red Hat Security Advisory: valkey security update","status":"published","published":"2025-07-21T10:02:03Z","modified":"2026-08-08T10:06:39Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:11453","title":"Red Hat Security Advisory: redis security update","status":"published","published":"2025-07-22T10:03:18Z","modified":"2026-08-08T10:06:40Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:12006","title":"Red Hat Security Advisory: redis:6 security update","status":"published","published":"2025-07-29T10:07:33Z","modified":"2026-08-08T10:06:40Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:12008","title":"Red Hat Security Advisory: redis:7 security update","status":"published","published":"2025-07-29T10:07:34Z","modified":"2026-08-08T10:06:41Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:12468","title":"Red Hat Security Advisory: redis security update","status":"published","published":"2025-08-01T10:11:31Z","modified":"2026-08-08T10:06:41Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:12478","title":"Red Hat Security Advisory: redis security update","status":"published","published":"2025-08-03T10:45:01Z","modified":"2026-08-08T10:06:42Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:12524","title":"Red Hat Security Advisory: redis security update","status":"published","published":"2025-08-05T10:22:05Z","modified":"2026-08-08T10:06:43Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:12768","title":"Red Hat Security Advisory: redis:6 security update","status":"published","published":"2025-08-05T10:22:14Z","modified":"2026-08-08T10:06:43Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:12769","title":"Red Hat Security Advisory: redis:6 security update","status":"published","published":"2025-08-05T10:22:15Z","modified":"2026-08-08T10:06:44Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:12789","title":"Red Hat Security Advisory: redis:6 security update","status":"published","published":"2025-08-05T10:22:16Z","modified":"2026-08-08T10:06:44Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:12892","title":"Red Hat Security Advisory: redis:7 security update","status":"published","published":"2025-08-05T10:22:21Z","modified":"2026-08-08T10:06:45Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RLSA-2025:11401","title":"Important: valkey security update","description":"Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets.  You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set.  In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log.  Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth.  Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache.  You can use Valkey from most programming languages also.\n\nSecurity Fix(es):\n\n* redis: Redis Stack Buffer Overflow (CVE-2025-27151)\n\n* redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)\n\n* redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-08T17:12:46.085355Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:11453","title":"Important: redis security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)\n\n* redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-04T00:49:55.563826Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:12006","title":"Important: redis:6 security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)\n\n* redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T15:00:29.019281Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:12008","title":"Important: redis:7 security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: Redis Stack Buffer Overflow (CVE-2025-27151)\n\n* redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)\n\n* redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-07T17:40:08.224669Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2025-48367","description":"Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.","status":"published","published":"2025-07-07T16:15:00Z","modified":"2026-11-09T12:49:26.560257807Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-09T13:27:42.046613Z"},{"id":"ALSA-2025:11401","title":"Important: valkey security update","description":"Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also.  \n\nSecurity Fix(es):  \n\n  * redis: Redis Stack Buffer Overflow (CVE-2025-27151)\n  * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)\n  * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-21T00:00:00Z","modified":"2026-10-29T11:58:15.525142Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:12006","title":"Important: redis:6 security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  \n\nSecurity Fix(es):  \n\n  * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)\n  * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-28T00:00:00Z","modified":"2026-10-29T11:02:26.340282957Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:12008","title":"Important: redis:7 security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  \n\nSecurity Fix(es):  \n\n  * redis: Redis Stack Buffer Overflow (CVE-2025-27151)\n  * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)\n  * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-28T00:00:00Z","modified":"2026-10-29T11:32:27.590026304Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-64809","title":"CVE-2025-48367 affecting package redis for versions less than 6.2.18-3","description":"Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.","status":"published","published":"2025-07-07T16:15:24Z","modified":"2026-04-21T04:32:34.135964Z","updated_at":"2026-11-02T15:28:08.076947Z"},{"id":"AZL-64827","title":"CVE-2025-48367 affecting package valkey for versions less than 8.0.4-1","description":"Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.","status":"published","published":"2025-07-07T16:15:24Z","modified":"2026-04-21T04:53:12.185625Z","updated_at":"2026-11-02T15:28:08.076947Z"},{"id":"BIT-keydb-2025-48367","title":"Redis DoS Vulnerability due to bad connection error handling","description":"Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.","status":"published","published":"2025-10-16T12:00:55.638Z","modified":"2026-09-08T08:48:07.66721152Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-redis-2025-48367","title":"Redis DoS Vulnerability due to bad connection error handling","description":"Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.","status":"published","published":"2025-10-16T12:07:00.72Z","modified":"2026-09-08T08:48:18.988182951Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"BIT-valkey-2025-48367","title":"Redis DoS Vulnerability due to bad connection error handling","description":"Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.","status":"published","published":"2025-10-16T12:08:13.783Z","modified":"2026-09-08T08:48:21.180730354Z","updated_at":"2026-11-02T15:28:36.104787Z"},{"id":"CLSA-2025-1755886747","title":"redis: Fix of CVE-2025-48367","description":"- CVE-2025-48367: prevent unauthenticated connections causing IP protocol errors\n  by implementing authentication checks","status":"published","published":"2025-08-22T18:19:11Z","modified":"2026-06-01T00:31:10.991067492Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2026-1788372462","title":"Fix CVE(s): CVE-2025-21605, CVE-2025-48367, CVE-2026-66373","description":"   * SECURITY UPDATE: Memory exhaustion via unauthenticated client output buffer\n     - debian/patches/0016-CVE-2025-21605.patch: cap the output buffer of\n       unauthenticated clients in checkClientOutputBufferLimits() in\n       src/networking.c, so a client that never reads its NOAUTH replies\n       cannot grow the buffer without bound. Backport of upstream redis\n       commit 5e93f9cb9 (6.2.18) as shipped by Debian for bullseye in\n       5:6.0.16-1+deb11u9 (DLA-4162-1), adapted to 5.0 by spelling the\n       condition as server.requirepass \u0026\u0026 !c-\u003eauthenticated, since 5.0\n       predates the ACL subsystem and has no authRequired() helper.\n     - CVE-2025-21605\n   * SECURITY UPDATE: Client starvation via repeated accept() errors\n     - debian/patches/0017-CVE-2025-48367.patch: add\n       anetAcceptFailureNeedsRetry() to src/anet.c and retry the accept\n       loop in acceptTcpHandler()/acceptUnixHandler() in src/networking.c\n       and clusterAcceptHandler() in src/cluster.c, so a connection that\n       fails at accept() time no longer aborts the whole batch and starves\n       other pending clients. Backport of upstream redis commit 0fe674359\n       (6.2.19) as shipped by Debian for bullseye in 5:6.0.16-1+deb11u9\n       (DLA-4240-1); the acceptTLSHandler() hunk is dropped because 5.0\n       has no TLS support.\n     - CVE-2025-48367\n   * SECURITY UPDATE: Double free via stream RDB payload with a shared NACK\n     - debian/patches/0018-CVE-2026-66373.patch: reject a stream payload\n       whose consumer PELs reference the same global-PEL NACK twice, in\n       rdbLoadObject() in src/rdb.c, so RESTORE can no longer build two\n       consumers sharing one streamNACK and have XGROUP DELCONSUMER free\n       it twice. Backport of upstream redis commit 41a958720 (6.2.23) as\n       shipped by Debian for bullseye and bookworm in 5:6.0.16-1+deb11u9\n       and 5:7.0.15-1~deb12u9 (DLA-4722-1), taken verbatim in the Debian\n       form that uses rdbExitReportCorruptRDB(). Note this CVE exists\n       because of an incomplete fix for CVE-2026-25243, which is a\n       separate change and is not addressed here.\n     - CVE-2026-66373","status":"published","published":"2026-09-02T18:07:54Z","modified":"2026-10-26T09:43:18.682215829Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"DLA-4240-1","title":"redis - security update","status":"published","published":"2025-07-12T00:00:00Z","modified":"2026-03-09T02:11:17.921489Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5969-1","title":"redis - security update","status":"published","published":"2025-07-31T00:00:00Z","modified":"2026-03-09T02:10:42.589348Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0211","title":"Updated redis packages fix security vulnerabilities","description":"Updated redis packages to a more recent version to fix security\nvulnerabilities:\nSome vulnerabilities have been discovered and fixed.\nPlease note this update is from 7.0 to 7.2 which brings some potentially\nbreaking changes. In most cases this update could be installed without\nproblems.\nPotentially Breaking / Behavior Changes:\n* Client side tracking for scripts now tracks the keys that are read by\n  the script instead of the keys that are declared by the caller of EVAL /\n  FCALL (#11770)\n* Freeze time sampling during command execution and in scripts (#10300)\n* When a blocked command is being unblocked, checks like ACL, OOM, etc\n  are re-evaluated (#11012)\n* Unify ACL failure error message text and error codes (#11160)\n* Blocked stream command that's released when key no longer exists\n  carries a different error code (#11012)\n* Command stats are updated for blocked commands only when / if the\n  command actually executes (#11012)\n* The way ACL users are stored internally no longer removes redundant\n  command and category rules, which may alter the way those rules are\n  displayed as part of `ACL SAVE`, `ACL GETUSER` and `ACL LIST` (#11224)\n* Client connections created for TLS-based replication use SNI if\n  possible (#11458)\n* Stream consumers: Re-purpose seen-time, add active-time (#11099)\n* XREADGROUP and X[AUTO]CLAIM create the consumer regardless of whether\n  it was able to perform some reading/claiming (#11099)\n* ACL default newly created user set sanitize-payload flag in ACL\n  LIST/GETUSER #11279\n* Fix HELLO command not to affect the client state unless successful\n  (#11659)\n* Normalize `NAN` in replies to a single nan type, like we do with `inf`\n  (#11597)\n* Cluster SHARD IDs are no longer visible in the cluster nodes output,\n  introduced in 7.2-RC1. (#10536, #12166)\n* When calling PUBLISH with a RESP3 client that's also subscribed to the\n  same channel, the order is changed and the reply is sent before the\n  published message (#12326)\n","status":"published","published":"2025-07-19T17:55:11Z","modified":"2026-04-16T04:43:48.632653865Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15318-1","title":"redis-8.0.3-1.1 on GA media","description":"These are all security issues fixed in the redis-8.0.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-07T00:00:00Z","modified":"2026-03-23T04:53:38.532437Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15359-1","title":"valkey-8.1.3-1.1 on GA media","description":"These are all security issues fixed in the valkey-8.1.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-18T00:00:00Z","modified":"2026-03-23T04:53:41.183253Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-SU-2025:02579-1","title":"Security update for redis","description":"This update for redis fixes the following issues:\n\n- CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. (bsc#1246059)\n- CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client starvation and DoS. (bsc#1246058)\n","status":"published","published":"2025-07-31T11:38:07Z","modified":"2026-02-04T02:36:40.252503Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02593-1","title":"Security update for valkey","description":"This update for valkey fixes the following issues:\n\n- CVE-2025-32023: Fixed an out-of-bounds write when working with HyperLogLog commands that can lead to remote code execution. (bsc#1246059)\n- CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros that can lead to client starvation and DoS. (bsc#1246058)\n","status":"published","published":"2025-08-01T15:13:06Z","modified":"2026-03-23T04:46:42.159613Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02594-1","title":"Security update for valkey","description":"This update for valkey fixes the following issues:\n\n- CVE-2025-32023: Fixed an out-of-bounds write when working with HyperLogLog commands that can lead to remote code execution. (bsc#1246059)\n- CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros that can lead to client starvation and DoS. (bsc#1246058)\n","status":"published","published":"2025-08-01T15:13:19Z","modified":"2026-03-23T04:46:42.12103Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02679-1","title":"Security update for redis","description":"This update for redis fixes the following issues:\n\n- CVE-2025-27151: Fixed absence of filename size check may cause a stack overflow. (bsc#1243804)\n- CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. (bsc#1246059)\n- CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client starvation and DoS. (bsc#1246058)\n","status":"published","published":"2025-08-04T15:03:05Z","modified":"2026-03-23T04:46:45.457047Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02680-1","title":"Security update for redis","description":"This update for redis fixes the following issues:\n\n- CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. (bsc#1246059)\n- CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client starvation and DoS. (bsc#1246058)\n","status":"published","published":"2025-08-04T15:04:09Z","modified":"2026-03-23T04:46:45.444329Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02681-1","title":"Security update for redis","description":"This update for redis fixes the following issues:\n\n- CVE-2025-27151: Fixed absence of filename size check may cause a stack overflow. (bsc#1243804)\n- CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. (bsc#1246059)\n- CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client starvation and DoS. (bsc#1246058)\n","status":"published","published":"2025-08-04T15:04:37Z","modified":"2026-03-23T04:46:45.626898Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03073-1","title":"Security update for redis","description":"This update for redis fixes the following issues:\n\n- CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. (bsc#1246059)\n- CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client starvation and DoS. (bsc#1246058)\n","status":"published","published":"2025-09-04T08:52:31Z","modified":"2026-03-23T04:48:44.295812Z","updated_at":"2026-11-02T15:53:57.111474Z"}]}}