valkey vulnerabilities (Debian)
25 vulnerabilities.
-
valkeyDebian valkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds 2.3 Low -
valkeyDebian valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds 6.9 Medium -
valkeyDebian valkey-io valkey Module Timer module.c moduleTimerHandler double free 4.8 Medium -
valkeyDebian valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free 2.1 Low -
valkeyDebian Valkey: UAF in stream deserialization may lead to remote code execution 8.8 High -
valkeyDebian Valkey: TLS pending-data processing use-after-free may allow remote code execution 7.5 High -
valkeyDebian redis-server RESTORE invalid memory access may allow remote code execution 7.7 High -
valkeyDebian redis-server Lua use-after-free may allow remote code execution 6.1 Medium -
valkeyDebian redis-server use-after-free in unblock client flow may allow remote code execution 7.7 High -
valkeyDebian Malformed Valkey Cluster bus message can lead to Remote DoS 7.5 High -
valkeyDebian Valkey Affected by RESP Protocol Injection via Lua error_reply 8.5 High -
valkeyDebian Redis Lua Use-After-Free may lead to remote code execution 10.0 Critical -
valkeyDebian Redis is vulnerable to DoS via specially crafted LUA scripts 6.3 Medium -
valkeyDebian Redis: Authenticated users can execute LUA scripts as a different user 6.0 Medium -
valkeyDebian Lua library commands may lead to integer overflow and potential RCE 7.0 High -
valkeyDebian Redis DoS Vulnerability due to bad connection error handling 7.5 High -
valkeyDebian Redis allows out of bounds writes in hyperloglog commands leading to RCE 7.0 High -
valkeyDebian setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size ... 3.1 Low -
valkeyDebian redis-check-aof may lead to stack overflow and potential RCE 4.7 Medium -
valkeyDebian Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client 7.5 High -
valkeyDebian Redis allows denial-of-service due to malformed ACL selectors 4.4 Medium -
valkeyDebian Redis' Lua library commands may lead to remote code execution 7.0 High -
valkeyDebian Lua library commands may lead to stack overflow and RCE in Redis 7.0 High -
valkeyDebian Denial-of-service due to unbounded pattern matching in Redis 5.5 Medium -
valkeyDebian Denial-of-service due to malformed ACL selectors in Redis 4.4 Medium