Redislabs vulnerabilities

Products

• Redis 22
• Redisgraph 3

Newest

• redislabs redisgraph An issue in RedisGraph v.2.12.10 allows an attacker to execute arbitrary code and cause a denial... CVE-2023-47003 9.8 CriticalNovember 16, 2023
• redislabs redisgraph Buffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9... CVE-2023-47004 8.8 HighNovember 6, 2023
• redislabs redis A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service ... CVE-2020-21468 Disputed 7.5 HighSeptember 20, 2021
• redis, debian linux, fedoraproject fedora +2 more Integer overflow issues with *BIT commands on 32-bit systems CVE-2021-32761 Fix available EPSS 30.1% 7.5 HighJuly 21, 2021
• redis, fedoraproject fedora +1 more Redis vulnerability in STRALGO LCS on 32-bit systems CVE-2021-32625 Fix available 7.5 HighJune 2, 2021
• redis, fedoraproject fedora +1 more Vulnerability in the COPY command for large intsets CVE-2021-29478 Fix available 7.5 HighMay 4, 2021
• redis, fedoraproject fedora +1 more Vulnerability in the STRALGO LCS command CVE-2021-29477 Fix available 7.5 HighMay 4, 2021
• redis A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0... CVE-2021-3470 Fix available 5.3 MediumMarch 31, 2021
• redis Integer overflow on 32-bit systems CVE-2021-21309 Fix available 5.4 MediumFebruary 25, 2021
• redislabs redisgraph RedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference that leads to a server crash because... CVE-2020-35668 7.5 HighDecember 23, 2020
• redislabs redis, debian linux, oracle communications operations monitor +1 more +3 more An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context... CVE-2020-14147 Fix available 7.7 HighJune 15, 2020
• redislabs hiredis, debian linux, fedoraproject fedora +2 more async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference... CVE-2020-7105 Fix available 7.5 HighJanuary 16, 2020
• redis Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds. CVE-2013-0180 Fix available 5.5 MediumNovember 1, 2019
• redis Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm. CVE-2013-0178 Fix available 5.5 MediumNovember 1, 2019
• redis, canonical ubuntu linux, debian linux +6 more +8 more A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions... CVE-2019-10193 Fix available EPSS 23.3% 7.2 HighJuly 11, 2019
• redis, canonical ubuntu linux, debian linux +7 more +9 more A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3... CVE-2019-10192 Fix available EPSS 25.6% 7.2 HighJuly 10, 2019
• redislabs redis Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to... CVE-2018-12326 Public exploitFix available 8.4 HighJune 17, 2018
• redislabs redis, debian linux, oracle communications operations monitor +1 more +3 more An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis... CVE-2018-11219 Fix available 9.8 CriticalJune 17, 2018
• redislabs redis, debian linux, oracle communications operations monitor +1 more +3 more Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2... CVE-2018-11218 Public exploitFix available EPSS 58.8% 9.8 CriticalJune 17, 2018
• redislabs redis Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0... CVE-2018-12453 Public exploit EPSS 23.1% 7.5 HighJune 16, 2018
• redislabs redis networking.c in Redis before 3.2.7 allows "Cross Protocol Scripting" because it lacks a check for... CVE-2016-10517 Fix available 7.4 HighOctober 24, 2017
• redislabs redis The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of... CVE-2017-15047 Fix available 9.8 CriticalOctober 6, 2017
• redis A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted... CVE-2016-8339 Fix available EPSS 14.8% 6.6 MediumOctober 28, 2016
• redislabs redis, debian linux +1 more linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history,... CVE-2013-7458 Fix available 3.3 LowJuly 30, 2016
• redislabs redis, debian linux, opensuse leap +2 more +4 more Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x... CVE-2015-8080 Fix available 7.5 HighDecember 3, 2015
• redislabs redis, debian linux +1 more Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua... CVE-2015-4335 Fix available 10.0 HighJune 6, 2015