{"id":"CVE-2026-72568","aliases":["DEBIAN-CVE-2026-72568","EUVD-2026-55238","GHSA-qhgh-7273-8939","RHSA-2026:43236","RHSA-2026:65120","RHSA-2026:69520","RHSA-2026:69521","RLSA-2026:65120","UBUNTU-CVE-2026-72568"],"status":"rejected","title":"An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated...","description":"Red Hat CNA-LR concluded that this CVE is not valid.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2026-08-07T10:27:22Z","modified":"2026-10-10T10:19:06Z","affected":[{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.5-0.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"valkey-compat-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.5-0.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"valkey-compat-redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.5-0.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"valkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.5-0.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"valkey-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.5-0.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"valkey-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.5-0.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.8.0+24745+654dcf03"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.8.0+24745+654dcf03"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.8.0+24745+654dcf03"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.8.0+24745+654dcf03"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.8.0+24745+654dcf03"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.6.0+24910+8b24772d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.6.0+24910+8b24772d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.6.0+24910+8b24772d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.6.0+24910+8b24772d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.6.0+24910+8b24772d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.4.0+24911+6845972a.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.4.0+24911+6845972a.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.4.0+24911+6845972a.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.4.0+24911+6845972a.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.4.0+24911+6845972a.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.8.0+40315+e15874a8"}]}],"bundled":3}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72568","tags":["advisory"]},{"url":"https://github.com/redis/redis","tags":["advisory","report"]},{"url":"https://redis.io"},{"url":"https://github.com/advisories/GHSA-qhgh-7273-8939"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72568.json","tags":["advisory"]},{"url":"https://redis.io/","tags":["advisory","report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-72568","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:43236","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-66373","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-72568","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_43236.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2506985","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-66373","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66373","tags":["advisory"]},{"url":"https://github.com/berabuddies/redis-poc","tags":["article"]},{"url":"https://github.com/redis/redis/compare/8.6.4...8.8.0","tags":["article"]},{"url":"https://github.com/redis/redis/pull/15081","tags":["article"]},{"url":"https://news.ycombinator.com/item?id=49024938","tags":["article"]},{"url":"https://x.com/Fried_rice/status/2080059356322918777","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-72568","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65120","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2525226","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65120.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-81934","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-81934","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81934","tags":["advisory"]},{"url":"https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834","tags":["article"]},{"url":"https://github.com/v12-security/pocs/tree/main/redis/server_ssl","tags":["article"]},{"url":"https://raw.githubusercontent.com/redis/redis/8.10/00-RELEASENOTES","tags":["article"]},{"url":"https://raw.githubusercontent.com/redis/redis/8.2/00-RELEASENOTES","tags":["article"]},{"url":"https://raw.githubusercontent.com/redis/redis/8.4/00-RELEASENOTES","tags":["article"]},{"url":"https://raw.githubusercontent.com/redis/redis/8.6/00-RELEASENOTES","tags":["article"]},{"url":"https://raw.githubusercontent.com/redis/redis/8.8/00-RELEASENOTES","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92925","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535971","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92925","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92925","tags":["advisory"]},{"url":"https://github.com/redis/redis/commit/37894faeea11e2db28b9fc2af378a762d2c36523","tags":["article"]},{"url":"https://github.com/redis/redis/pull/15263","tags":["article"]},{"url":"https://github.com/redis/redis/releases/tag/8.10.0","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69520","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69520.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69521","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69521.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:65120","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-72568","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-72568","description":"Red Hat CNA-LR concluded that this CVE is not valid.","status":"rejected","published":"2026-08-10T10:40:40.305Z","modified":"2026-08-17T14:00:17.68Z","updated_at":"2026-11-02T14:19:51.663093Z"}],"euvd":[{"id":"EUVD-2026-55238","description":"Red Hat CNA-LR concluded that this CVE is not valid.","status":"published","published":"2026-08-10T10:40:40Z","modified":"2026-08-17T14:00:17Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:01:49.335011Z"}],"ghsa":[{"id":"GHSA-qhgh-7273-8939","title":"An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated...","description":"An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port.","status":"published","published":"2026-08-10T12:31:52Z","modified":"2026-08-10T12:32:01Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:10:13.54571Z"}],"nvd":[{"id":"CVE-2026-72568","description":"Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid.","status":"rejected","published":"2026-08-10T11:17:29.373Z","modified":"2026-08-17T14:20:22.197Z","updated_at":"2026-11-02T14:12:35.743275Z"}],"osv":[{"id":"CVE-2026-72568","title":"Redis - Heap Out-of-Bounds Read in Cluster Bus PING Message Handler","description":"An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port.","status":"published","published":"2026-08-10T10:40:40.305Z","modified":"2026-08-19T03:48:31.897431905Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:45:15.88521Z"},{"id":"DEBIAN-CVE-2026-72568","description":"An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port.","status":"withdrawn","published":"2026-08-10T11:17:29.373Z","modified":"2026-08-18T02:00:37.163979067Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:02.499355Z"},{"id":"RHSA-2026:43236","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-08-07T10:27:22Z","modified":"2026-10-06T10:31:27.78014987Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:65120","title":"Red Hat Security Advisory: redis:7 security update","status":"published","published":"2026-09-09T10:20:19Z","modified":"2026-10-10T10:17:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:69520","title":"Red Hat Security Advisory: redis:7 security update","status":"published","published":"2026-09-22T10:20:01Z","modified":"2026-10-10T10:19:06Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69521","title":"Red Hat Security Advisory: redis:7 security update","status":"published","published":"2026-09-22T10:20:02Z","modified":"2026-10-10T10:19:06Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RLSA-2026:65120","title":"Important: redis:7 security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373)\n\n* redis: Redis: Denial of Service via Out-of-Bounds Read in Cluster Bus (CVE-2026-72568)\n\n* redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-09T12:05:17.368443Z","modified":"2026-09-09T12:30:03.351185905Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-72568","description":"An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port.","status":"withdrawn","published":"2026-08-10T11:17:00Z","modified":"2026-08-19T13:35:01.224563677Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:57:08.628462Z"}]}}