redis vulnerabilities (Red Hat)
52 vulnerabilities.
-
redisRed Hat Redis TLS pending-data list use-after-free 7.5 High -
redisRed Hat An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated... 7.1 High -
redisRed Hat Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,... 7.5 High -
redisRed Hat redis-server RESTORE invalid memory access may allow remote code execution 7.7 High -
redisRed Hat redis-server Lua use-after-free may allow remote code execution 6.1 Medium -
redisRed Hat redis-server use-after-free in unblock client flow may allow remote code execution 7.7 High -
redisRed Hat Redis: redis: out-of-bounds read via crafted cluster bus packets 7.1 High -
redisRed Hat Redis Lua Use-After-Free may lead to remote code execution 10.0 Critical -
redisRed Hat Redis is vulnerable to DoS via specially crafted LUA scripts 6.3 Medium -
redisRed Hat Redis: Authenticated users can execute LUA scripts as a different user 6.0 Medium -
redisRed Hat Lua library commands may lead to integer overflow and potential RCE 7.0 High -
redisRed Hat Redis DoS Vulnerability due to bad connection error handling 7.5 High -
redisRed Hat Redis allows out of bounds writes in hyperloglog commands leading to RCE 7.0 High -
redisRed Hat redis-check-aof may lead to stack overflow and potential RCE 4.7 Medium -
redisRed Hat Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client 7.5 High -
redisRed Hat Redis allows denial-of-service due to malformed ACL selectors 4.4 Medium -
redisRed Hat Redis' Lua library commands may lead to remote code execution 7.0 High -
redisRed Hat Lua library commands may lead to stack overflow and RCE in Redis 7.0 High -
redisRed Hat Denial-of-service due to unbounded pattern matching in Redis 5.5 Medium -
redisRed Hat Denial-of-service due to malformed ACL selectors in Redis 4.4 Medium -
redisRed Hat Redis vulnerable to integer overflow in certain payloads 8.1 High -
redisRed Hat Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window. 3.6 Low -
redisRed Hat Redis SORT_RO may bypass ACL configuration 3.3 Low -
redisRed Hat Heap overflow issue with the Lua cjson library used by Redis 7.0 High -
redisRed Hat `HINCRBYFLOAT` can be used to crash a redis-server process 5.5 Medium -
redisRed Hat Integer Overflow in several Redis commands can lead to denial of service. 5.5 Medium -
redisRed Hat Redis string pattern matching can be abused to achieve Denial of Service 5.5 Medium -
redisRed Hat Integer overflow in certain command arguments can drive Redis to OOM panic 5.5 Medium -
redisRed Hat Integer overflow in multiple Redis commands can lead to denial-of-service 5.5 Medium -
redisRed Hat A Malformed Lua script can crash Redis 3.3 Low -
redisRed Hat Lua scripts can be manipulated to overcome ACL rules in Redis 3.9 Low -
redisRed Hat Integer overflow issue with strings in Redis 7.5 High -
redisRed Hat Integer overflow issue with intsets in Redis 7.5 High -
redisRed Hat DoS vulnerability in Redis 7.5 High -
redisRed Hat Integer overflow issue with Streams in Redis 7.5 High -
redisRed Hat Vulnerability in handling large ziplists 7.5 High -
redisRed Hat Lua scripts can overflow the heap-based Lua stack in Redis 7.5 High -
redisRed Hat Vulnerability in the STRALGO LCS command 7.5 High -
redisRed Hat A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions... 7.2 High -
redisRed Hat A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3... 7.2 High -
redisRed Hat A permissions flaw was found in redis, which sets weak permissions on certain files and... 4.0 Medium -
redisRed Hat Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to... 8.4 High -
redisRed Hat An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis... 9.8 Critical -
redisRed Hat Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2... 9.8 Critical -
redisRed Hat Prototype Pollution in hoek 8.8 High -
redisRed Hat Regular Expression Denial of Service in tough-cookie 7.5 High -
redisRed Hat It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user.... 6.1 Medium -
redisRed Hat The external_request api call in App Studio (millicore) allows server side request forgery (SSRF)... 6.3 Medium -
redisRed Hat A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x... 9.8 Critical -
redisRed Hat A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an... 8.8 High - Show olderLoading…