redis vulnerabilities (Alpaquita)
28 vulnerabilities.
redisAlpaquitaRedis TLS pending-data list use-after-free7.5 HighredisAlpaquitaValkey: UAF in stream deserialization may lead to remote code execution8.8 HighredisAlpaquitaValkey: TLS pending-data processing use-after-free may allow remote code execution7.5 HighredisAlpaquitaredis-server RESTORE invalid memory access may allow remote code execution7.7 HighredisAlpaquitaredis-server Lua use-after-free may allow remote code execution6.1 MediumredisAlpaquitaredis-server use-after-free in unblock client flow may allow remote code execution7.7 HighredisAlpaquitaMalformed Valkey Cluster bus message can lead to Remote DoS7.5 HighredisAlpaquitaValkey Affected by RESP Protocol Injection via Lua error_reply8.5 HighredisAlpaquitaRedis: Bug in XACKDEL may lead to stack overflow and potential RCE7.7 HighredisAlpaquitaRedis Lua Use-After-Free may lead to remote code execution10.0 CriticalredisAlpaquitaRedis is vulnerable to DoS via specially crafted LUA scripts6.3 MediumredisAlpaquitaRedis: Authenticated users can execute LUA scripts as a different user6.0 MediumredisAlpaquitaLua library commands may lead to integer overflow and potential RCE7.0 HighredisAlpaquitaRedis DoS Vulnerability due to bad connection error handling7.5 HighredisAlpaquitaRedis allows out of bounds writes in hyperloglog commands leading to RCE7.0 HighredisAlpaquitasetDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size ...3.1 LowredisAlpaquitaredis-check-aof may lead to stack overflow and potential RCE4.7 MediumredisAlpaquitaRedis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client7.5 HighredisAlpaquitaRedis allows denial-of-service due to malformed ACL selectors4.4 MediumredisAlpaquitaRedis' Lua library commands may lead to remote code execution7.0 HighredisAlpaquitaLua library commands may lead to stack overflow and RCE in Redis7.0 HighredisAlpaquitaDenial-of-service due to unbounded pattern matching in Redis5.5 MediumredisAlpaquitaDenial-of-service due to malformed ACL selectors in Redis4.4 MediumredisAlpaquitaRedis vulnerable to integer overflow in certain payloads8.1 HighredisAlpaquitaRedis Unix-domain socket may have be exposed with the wrong permissions for a short time window.3.6 LowredisAlpaquitaRedis SORT_RO may bypass ACL configuration3.3 LowredisAlpaquitaHeap overflow issue with the Lua cjson library used by Redis7.0 HighredisAlpaquitaHeap overflow in COMMAND GETKEYS and ACL evaluation in Redis7.4 High