Debian Redis vulnerabilities

CVE-2021-29477 [HIGH] CVE-2021-29477: redis - Redis is an open source (BSD licensed), in-memory data structure store, used as ... Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer could be exploited using the `STRALGO LCS` command to corrupt the heap and potentially result with remote code execution. The problem is fixed in version 6.2.3 and 6.0.13. An additional workaround

CVE-2022-31144 [HIGH] CVE-2022-31144: redis - Redis is an in-memory database that persists on disk. A specially crafted `XAUTO... Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version 7.0.4. Scope: local bookworm: resolved (fixed in 5:7.0.4-1) bullseye: re

CVE-2019-10193 [HIGH] CVE-2019-10193: redis - A stack-buffer overflow vulnerability was found in the Redis hyperloglog data st... A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past the end of a stack-allocated buffer. Scope: local bookworm: resolved (fi

CVE-2021-32625 [HIGH] CVE-2021-32625: redis - Redis is an open source (BSD licensed), in-memory data structure store, used as ... Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer, could be exploited using the STRALGO LCS command to corrupt the heap and potentially result with remote code execution. This is a result of an incomplete fix by CVE-2021-29477. The problem is fixe

CVE-2021-32675 [HIGH] CVE-2021-32675: redis - Redis is an open source, in-memory database that persists on disk. When parsing ... Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RESP) request, Redis allocates memory according to user-specified values which determine the number of elements (in the multi-bulk header) and size of each element (in the bulk header). An attacker delivering specially crafted requests over multiple con

CVE-2023-22458 [MEDIUM] CVE-2023-22458: redis - Redis is an in-memory database that persists on disk. Authenticated users can is... Redis is an in-memory database that persists on disk. Authenticated users can issue a `HRANDFIELD` or `ZRANDMEMBER` command with specially crafted arguments to trigger a denial-of-service by crashing Redis with an assertion failure. This problem affects Redis versions 6.2 or newer up to but not including 6.2.9 as well as versions 7.0 up to but not including 7.0.8. U

CVE-2021-29478 [HIGH] CVE-2021-29478: redis - Redis is an open source (BSD licensed), in-memory data structure store, used as ... Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis 6.2 before 6.2.3 could be exploited to corrupt the heap and potentially result with remote code execution. Redis 6.0 and earlier are not directly affected by this issue. The problem is fixed in version 6.2.3. An additi

CVE-2025-27151 [MEDIUM] CVE-2025-27151: redict - Redis is an open source, in-memory database that persists on disk. In versions s... Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlen(filepath) when copying a user-supplied file path into a fixed-size stack buffer. This allows an attacker to overflow the stack and potentially achieve code ex

CVE-2021-32687 [HIGH] CVE-2021-32687: redis - Redis is an open source, in-memory database that persists on disk. An integer ov... Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can be exploited to corrupt the heap and potentially be used to leak arbitrary contents of the heap or trigger remote code execution. The vulnerability involves changing the default set-max-intset-entries configuration parameter to a very large va

CVE-2021-32627 [HIGH] CVE-2021-32627: redis - Redis is an open source, in-memory database that persists on disk. In affected v... Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default proto-max-bulk-len and client-query-buffer-limit configuration parameters to very large values and constructing s

CVE-2021-32762 [HIGH] CVE-2021-32762: redis - Redis is an open source, in-memory database that persists on disk. The redis-cli... Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer overflow when parsing specially crafted large multi-bulk network replies. This is a result of a vulnerability in the underlying hiredis library which does not perform an overflow check before calling the calloc() he

CVE-2023-41056 [HIGH] CVE-2023-41056: redis - Redis is an in-memory database that persists on disk. Redis incorrectly handles ... Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4. Scope: local bookworm: resolved (fixed in 5:7.0.15-1~deb12u1) bullseye: resolved forky: resolved (fixed

CVE-2022-36021 [MEDIUM] CVE-2022-36021: redis - Redis is an in-memory database that persists on disk. Authenticated users can us... Redis is an in-memory database that persists on disk. Authenticated users can use string matching commands (like `SCAN` or `KEYS`) with a specially crafted pattern to trigger a denial-of-service attack on Redis, causing it to hang and consume 100% CPU time. The problem is fixed in Redis versions 6.0.18, 6.2.11, 7.0.9. Scope: local bookworm: resolved (fixed in 5:7.0.

CVE-2021-41099 [HIGH] CVE-2021-41099: redis - Redis is an open source, in-memory database that persists on disk. An integer ov... Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string library can be used to corrupt the heap and potentially result with denial of service or remote code execution. The vulnerability involves changing the default proto-max-bulk-len configuration parameter to a very large value and constructing specially cr

CVE-2018-11219 [CRITICAL] CVE-2018-11219: redis - An Integer Overflow issue was discovered in the struct library in the Lua subsys... An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking. Scope: local bookworm: resolved (fixed in 5:4.0.10-1) bullseye: resolved (fixed in 5:4.0.10-1) forky: resolved (fixed in 5:4.0.10-1) sid: resolved (fixed in 5:4.0.10-1) trixi

CVE-2023-28425 [MEDIUM] CVE-2023-28425: redis - Redis is an in-memory database that persists on disk. Starting in version 7.0.8 ... Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10. Scope: local bookworm: resolved (fixed in 5:7.0.10-1) bullseye: resolved forky: resolved (

CVE-2026-21863 [HIGH] CVE-2026-21863: redict - Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.... Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with access to the Valkey clusterbus port can send an invalid packet that may cause an out bound read, which might result in the system crashing. The Valkey clusterbus packet processing code does not validate that a clusterbus ping extension packet is loca

CVE-2022-35977 [MEDIUM] CVE-2022-35977: redis - Redis is an in-memory database that persists on disk. Authenticated users issuin... Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SETRANGE` and `SORT(_RO)` commands can trigger an integer overflow, resulting with Redis attempting to allocate impossible amounts of memory and abort with an out-of-memory (OOM) panic. The problem is fixed in Redis versions 7.0.8, 6.2.9 and 6.0.17. Users are advised

CVE-2025-21605 [HIGH] CVE-2025-21605: redict - Redis is an open source, in-memory database that persists on disk. In versions s... Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore,

CVE-2025-67733 [HIGH] CVE-2025-67733: redict - Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.... Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampered data to other users on the same connection. The error handling code for lua scripts does not properly hand