Search CVE reports
1 – 10 of 67 results
CVE-2025-29479
Medium priorityBuffer Overflow in hiredis 1.2.0 allows a local attacker to cause a denial of service via the sdscatlen function.
1 affected package
hiredis
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
hiredis | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
CVE-2025-29923
Medium prioritygo-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.3, go-redis potentially responds out of order when `CLIENT SETINFO` times out during connection establishment. This can...
1 affected package
golang-github-go-redis-redis
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
golang-github-go-redis-redis | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
CVE-2024-51737
Medium priorityRediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticated redis user executing FT.SEARCH or FT.AGGREGATE with a specially crafted LIMIT command argument, or FT.SEARCH...
1 affected package
redisearch
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
redisearch | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
CVE-2024-51741
Medium prioritySome fixes available 4 of 5
Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The...
3 affected packages
redict, redis, valkey
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
redict | Not in release | Not in release | Not in release | — | — |
redis | Fixed | Not affected | Not affected | Not affected | Not affected |
valkey | Fixed | Not in release | Not in release | — | — |
CVE-2024-46981
Medium prioritySome fixes available 8 of 9
Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is...
3 affected packages
redict, redis, valkey
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
redict | Not in release | Not in release | Not in release | — | — |
redis | Fixed | Fixed | Fixed | Fixed | Fixed |
valkey | Fixed | Not in release | Not in release | — | — |
CVE-2024-31449
High priorityRedis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code...
1 affected package
redis
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
redis | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
CVE-2024-31228
Medium prioritySome fixes available 6 of 7
Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`,...
1 affected package
redis
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
redis | Fixed | Fixed | Fixed | Fixed | Fixed |
CVE-2024-31227
Medium priorityRedis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The...
1 affected package
redis
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
redis | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
CVE-2023-41056
Medium priorityRedis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been...
1 affected package
redis
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
redis | Not affected | Not affected | Not affected | Not affected | Not affected |
CVE-2023-45145
Medium prioritySome fixes available 5 of 7
Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race...
1 affected package
redis
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
redis | Not affected | Fixed | Fixed | Fixed | Fixed |