Redis vulnerabilities
The newest vulnerabilities affecting Redis, up to 200. Subscribe by RSS.
- CVE-2026-92925Redis: redis: out-of-bounds read via crafted cluster bus packetsRed Hat Enterprise Linux · Pen Drive Powered by Red Hat… +2
- CVE-2026-81934Redis TLS pending-data list use-after-freeRedis
- CVE-2026-66373Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE paylRedis
- CVE-2026-25243redis-server RESTORE invalid memory access may allow remote code executionredis
- CVE-2026-23631redis-server Lua use-after-free may allow remote code executionredis
- CVE-2026-23479redis-server use-after-free in unblock client flow may allow remote code executionredis
- CVE-2025-62507Redis: Bug in XACKDEL may lead to stack overflow and potential RCEredis
- CVE-2025-49844Redis Lua Use-After-Free may lead to remote code executionredis
- CVE-2025-46819Redis is vulnerable to DoS via specially crafted LUA scriptsredis
- CVE-2025-46818Redis: Authenticated users can execute LUA scripts as a different userredis
- CVE-2025-46817Lua library commands may lead to integer overflow and potential RCEredis
- CVE-2025-46686Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user.Redis
- CVE-2025-48367Redis DoS Vulnerability due to bad connection error handlingredis
- CVE-2025-32023Redis allows out of bounds writes in hyperloglog commands leading to RCEredis
- CVE-2025-27151redis-check-aof may lead to stack overflow and potential RCEredis
- CVE-2025-21605Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated clientredis
- CVE-2025-29923go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishmentgo-redis · github.com/redis/go-redis +3
- CVE-2024-51741Redis allows denial-of-service due to malformed ACL selectorsredis
- CVE-2024-46981Redis' Lua library commands may lead to remote code executionredis
- CVE-2024-31449Lua library commands may lead to stack overflow and RCE in Redisredis
- CVE-2024-31228Denial-of-service due to unbounded pattern matching in Redisredis
- CVE-2024-31227Denial-of-service due to malformed ACL selectors in Redisredis
- CVE-2023-41056Redis vulnerable to integer overflow in certain payloadsredis
- CVE-2023-45145Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.redis
- CVE-2023-41053Redis SORT_RO may bypass ACL configurationredis
- CVE-2022-24834Heap overflow issue with the Lua cjson library used by Redisredis
- CVE-2023-36824Heap overflow in COMMAND GETKEYS and ACL evaluation in Redisredis
- CVE-2023-28856`HINCRBYFLOAT` can be used to crash a redis-server processredis
- CVE-2023-28858redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to redis
- CVE-2023-28859redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and canredis
- CVE-2023-28425Specially crafted MSETNX command can lead to denial-of-serviceredis
- CVE-2023-25155Integer Overflow in several Redis commands can lead to denial of service.redis
- CVE-2022-36021Redis string pattern matching can be abused to achieve Denial of Serviceredis
- CVE-2022-35977Integer overflow in certain command arguments can drive Redis to OOM panicredis
- CVE-2023-22458Integer overflow in multiple Redis commands can lead to denial-of-serviceredis
- CVE-2022-3734Redis on Windows dbghelp.dll uncontrolled search pathRedis
- CVE-2022-3647Redis Crash Report debug.c sigsegvHandler denial of serviceRedis
- CVE-2022-35951Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflowredis
- CVE-2022-31144Potential heap overflow in Redis redis
- CVE-2022-24736A Malformed Lua script can crash Redisredis
- CVE-2022-24735Lua scripts can be manipulated to overcome ACL rules in Redisredis
- CVE-2021-41099Integer overflow issue with strings in Redisredis
- CVE-2021-32762Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platformsredis
- CVE-2021-32687Integer overflow issue with intsets in Redisredis
- CVE-2021-32675DoS vulnerability in Redisredis
- CVE-2021-32672Vulnerability in Lua Debugger in Redisredis
- CVE-2021-32627Integer overflow issue with Streams in Redisredis
- CVE-2021-32628Vulnerability in handling large ziplistsredis
- CVE-2021-32626Lua scripts can overflow the heap-based Lua stack in Redisredis
- CVE-2021-32765Integer Overflow to Buffer Overflow in Hiredishiredis
- CVE-2021-32761Integer overflow issues with *BIT commands on 32-bit systemsredis
- CVE-2021-32625Redis vulnerability in STRALGO LCS on 32-bit systemsredis
- CVE-2021-29478Vulnerability in the COPY command for large intsetsredis
- CVE-2021-29477Vulnerability in the STRALGO LCS commandredis
- CVE-2021-29469Potential exponential regex in monitor modeNodeRedis node-redis · redis
- CVE-2021-3470A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemredis
- CVE-2021-21309Integer overflow on 32-bit systemsredis
- CVE-2013-0180Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds.Redis Labs Redis
- CVE-2013-0178Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm.Redis Labs Redis
- CVE-2019-10192A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.xRedis Labs redis
- CVE-2019-10193A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.Redis Labs redis
- CVE-2016-8339A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent.Redis