Debian Redis vulnerabilities

CVE-2022-24735 [LOW] CVE-2022-24735: redis - Redis is an in-memory database that persists on disk. By exploiting weaknesses i... Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior to version 7.0.0 or 6.2.7 can inject Lua code that will execute with the (potentially higher) privileges of another Redis user. The Lua script execution environment in Redis provides some measures that prevent a

CVE-2025-48367 [HIGH] CVE-2025-48367: redict - Redis is an open source, in-memory database that persists on disk. An unauthenti... Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. Scope: local forky: resolved (fixed in 7.3.5+ds-1) sid: resolved (fixed in 7.3.5+ds-1)

CVE-2016-10517 [HIGH] CVE-2016-10517: redis - networking.c in Redis before 3.2.7 allows "Cross Protocol Scripting" because it ... networking.c in Redis before 3.2.7 allows "Cross Protocol Scripting" because it lacks a check for POST and Host: strings, which are not valid in the Redis protocol (but commonly occur when an attack triggers an HTTP request to the Redis TCP port). Scope: local bookworm: resolved (fixed in 3:3.2.7-1) bullseye: resolved (fixed in 3:3.2.7-1) forky: resolved (fixed in 3:3

CVE-2015-8080 [HIGH] CVE-2015-8080: redis - Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.... Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer ov

CVE-2020-14147 [HIGH] CVE-2020-14147: redis - An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3... An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue

CVE-2023-25155 [MEDIUM] CVE-2023-25155: redis - Redis is an in-memory database that persists on disk. Authenticated users issuin... Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SRANDMEMBER`, `ZRANDMEMBER`, and `HRANDFIELD` commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. This problem affects all Redis versions. Patches were released in Redis version(s) 6.0.18, 6.2.11 and

CVE-2017-15047 [CRITICAL] CVE-2017-15047: redis - The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to c... The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging "limited access to the machine." Scope: local bookworm: resolved (fixed in 4:4.0.2-5) bullseye: resolved (fixed in 4:4.0.2-5) forky: resolved (fixed in 4:4

CVE-2024-31228 [MEDIUM] CVE-2024-31228: redict - Redis is an open source, in-memory database that persists on disk. Authenticated... Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`, `PSUBSCRIBE`, `FUNCTION LIST`, `COMMAND LIST` and ACL definitions. Matching of extremely long patterns may result in unbounded recursion, leading t

CVE-2023-28856 [MEDIUM] CVE-2023-28856: redis - Redis is an open source, in-memory database that persists on disk. Authenticated... Redis is an open source, in-memory database that persists on disk. Authenticated users can use the `HINCRBYFLOAT` command to create an invalid hash field that will crash Redis on access in affected versions. This issue has been addressed in in versions 7.0.11, 6.2.12, and 6.0.19. Users are advised to upgrade. There are no known workarounds for this issue. Scope: loc

CVE-2021-31294 [MEDIUM] CVE-2021-31294: redis - Redis before 6cbea7d allows a replica to cause an assertion failure in a primary... Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command). NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this. Scope: local bookworm: resolved (fixed in 5:7.0.1-4) bullseye: open forky:

CVE-2021-3470 [MEDIUM] CVE-2021-3470: redis - A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9... A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use jemalloc or glibc malloc. Scope: local bookworm: resolved (fixed in 5:6.0

CVE-2022-24736 [LOW] CVE-2022-24736: redis - Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 an... Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0 and 6.2.7. An additional workaround to mitigate this problem without patching th

CVE-2021-32672 [MEDIUM] CVE-2021-32672: redis - Redis is an open source, in-memory database that persists on disk. When using th... Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support (3.2 or newer). The problem is fixed in versions 6.2.6, 6.0.16 and 5.0.14. Scope: l

CVE-2016-2121 [MEDIUM] CVE-2016-2121: redis - A permissions flaw was found in redis, which sets weak permissions on certain fi... A permissions flaw was found in redis, which sets weak permissions on certain files and directories that could potentially contain sensitive information. A local, unprivileged user could possibly use this flaw to access unauthorized system information. Scope: local bookworm: resolved (fixed in 3:3.2.5-2) bullseye: resolved (fixed in 3:3.2.5-2) forky: resolved (fixed i

CVE-2013-0178 [MEDIUM] CVE-2013-0178: redis - Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-... Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm. Scope: local bookworm: resolved (fixed in 2:2.6.0-1) bullseye: resolved (fixed in 2:2.6.0-1) forky: resolved (fixed in 2:2.6.0-1) sid: resolved (fixed in 2:2.6.0-1) trixie: resolved (fixed in 2:2.6.0-1)

CVE-2013-0180 [MEDIUM] CVE-2013-0180: redis - Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds. Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds. Scope: local bookworm: resolved (fixed in 2:2.6.7-1) bullseye: resolved (fixed in 2:2.6.7-1) forky: resolved (fixed in 2:2.6.7-1) sid: resolved (fixed in 2:2.6.7-1) trixie: resolved (fixed in 2:2.6.7-1)

CVE-2024-31227 [MEDIUM] CVE-2024-31227: redict - Redis is an open source, in-memory database that persists on disk. An authentica... Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulne

CVE-2024-51741 [MEDIUM] CVE-2024-51741: redict - Redis is an open source, in-memory database that persists on disk. An authentica... Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2. Scope: local forky: resolved (fixed in 7.3.2+ds-1) sid: resolved (fixed in 7.3.2+ds-1)

CVE-2023-45145 [LOW] CVE-2023-45145: redis - Redis is an in-memory database that persists on disk. On startup, Redis begins l... Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during a short period of time, another process to establish an otherwise unauthorized connection. This problem has exi

CVE-2023-41053 [LOW] CVE-2023-41053: redis - Redis is an in-memory database that persists on disk. Redis does not correctly i... Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been fixed in Redis 7.0.13 and 7.2.1. Users are advised to upgrade. There ar