Redis vulnerabilities
51 CVEs and advisories name Redis as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-35977Integer overflow in certain command arguments can drive Redis to OOM panic
- CVE-2023-22458Integer overflow in multiple Redis commands can lead to denial-of-service
- CVE-2022-35951Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow
- CVE-2022-31144Potential heap overflow in Redis
- CVE-2022-24736A Malformed Lua script can crash Redis
- CVE-2022-24735Lua scripts can be manipulated to overcome ACL rules in Redis
- CVE-2021-41099Integer overflow issue with strings in Redis
- CVE-2021-32762Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms
- CVE-2021-32687Integer overflow issue with intsets in Redis
- CVE-2021-32675DoS vulnerability in Redis
- CVE-2021-32672Vulnerability in Lua Debugger in Redis
- CVE-2021-32627Integer overflow issue with Streams in Redis
- CVE-2021-32628Vulnerability in handling large ziplists
- CVE-2021-32626Lua scripts can overflow the heap-based Lua stack in Redis
- CVE-2021-32765Integer Overflow to Buffer Overflow in Hiredis
- CVE-2021-32761Integer overflow issues with *BIT commands on 32-bit systems
- CVE-2021-32625Redis vulnerability in STRALGO LCS on 32-bit systems
- CVE-2021-29478Vulnerability in the COPY command for large intsets
- CVE-2021-29477Vulnerability in the STRALGO LCS command
- CVE-2021-21309Integer overflow on 32-bit systems
- CVE-2016-8339A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent.