valkey vulnerabilities (Bitnami)
50 vulnerabilities.
-
valkeyBitnami Valkey: UAF in stream deserialization may lead to remote code execution 8.8 High -
valkeyBitnami Valkey: TLS pending-data processing use-after-free may allow remote code execution 7.5 High -
valkeyBitnami redis-server RESTORE invalid memory access may allow remote code execution 7.7 High -
valkeyBitnami redis-server Lua use-after-free may allow remote code execution 6.1 Medium -
valkeyBitnami redis-server use-after-free in unblock client flow may allow remote code execution 7.7 High -
valkeyBitnami Valkey has Pre-Authentication DOS from malformed RESP request 7.5 High -
valkeyBitnami Malformed Valkey Cluster bus message can lead to Remote DoS 7.5 High -
valkeyBitnami Valkey Affected by RESP Protocol Injection via Lua error_reply 8.5 High -
valkeyBitnami Redis Lua Use-After-Free may lead to remote code execution 10.0 Critical -
valkeyBitnami Redis is vulnerable to DoS via specially crafted LUA scripts 6.3 Medium -
valkeyBitnami Redis: Authenticated users can execute LUA scripts as a different user 6.0 Medium -
valkeyBitnami Lua library commands may lead to integer overflow and potential RCE 7.0 High -
valkeyBitnami Redis through 7.4.3 allows memory consumption via a multi-bulk command composed of many bulks,... 3.5 Low -
valkeyBitnami Redis DoS Vulnerability due to bad connection error handling 7.5 High -
valkeyBitnami Redis allows out of bounds writes in hyperloglog commands leading to RCE 7.0 High -
valkeyBitnami setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size ... 3.1 Low -
valkeyBitnami redis-check-aof may lead to stack overflow and potential RCE 4.7 Medium -
valkeyBitnami Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client 7.5 High -
valkeyBitnami Redis allows denial-of-service due to malformed ACL selectors 4.4 Medium -
valkeyBitnami Redis' Lua library commands may lead to remote code execution 7.0 High -
valkeyBitnami Lua library commands may lead to stack overflow and RCE in Redis 7.0 High -
valkeyBitnami Denial-of-service due to unbounded pattern matching in Redis 5.5 Medium -
valkeyBitnami Denial-of-service due to malformed ACL selectors in Redis 4.4 Medium -
valkeyBitnami Redis vulnerable to integer overflow in certain payloads 8.1 High -
valkeyBitnami Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window. 3.6 Low -
valkeyBitnami Redis SORT_RO may bypass ACL configuration 3.3 Low -
valkeyBitnami Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by... 5.9 Medium -
valkeyBitnami Heap overflow issue with the Lua cjson library used by Redis 7.0 High -
valkeyBitnami Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis 7.4 High -
valkeyBitnami redis-7.0.10 was discovered to contain a segmentation violation. 7.5 High -
valkeyBitnami `HINCRBYFLOAT` can be used to crash a redis-server process 5.5 Medium -
valkeyBitnami Specially crafted MSETNX command can lead to denial-of-service 5.5 Medium -
valkeyBitnami Integer Overflow in several Redis commands can lead to denial of service. 5.5 Medium -
valkeyBitnami Redis string pattern matching can be abused to achieve Denial of Service 5.5 Medium -
valkeyBitnami Integer overflow in certain command arguments can drive Redis to OOM panic 5.5 Medium -
valkeyBitnami Integer overflow in multiple Redis commands can lead to denial-of-service 5.5 Medium -
valkeyBitnami Redis Crash Report debug.c sigsegvHandler denial of service 3.1 Low -
valkeyBitnami Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow 7.0 High -
valkeyBitnami Potential heap overflow in Redis 7.0 High -
valkeyBitnami Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID. 7.5 High -
valkeyBitnami A Malformed Lua script can crash Redis 3.3 Low -
valkeyBitnami Lua scripts can be manipulated to overcome ACL rules in Redis 3.9 Low -
valkeyBitnami Integer overflow issue with strings in Redis 7.5 High -
valkeyBitnami Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms 7.5 High -
valkeyBitnami Integer overflow issue with intsets in Redis 7.5 High -
valkeyBitnami DoS vulnerability in Redis 7.5 High -
valkeyBitnami Vulnerability in Lua Debugger in Redis 5.3 Medium -
valkeyBitnami Integer overflow issue with Streams in Redis 7.5 High -
valkeyBitnami Vulnerability in handling large ziplists 7.5 High -
valkeyBitnami Lua scripts can overflow the heap-based Lua stack in Redis 7.5 High