Priority CRITICAL 100KEV
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.99351 · Published 2022-02-18 · No fix listed CWE-862
Priority HIGH 84
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1CRITICAL 10.0· Network · Low privileges · No interaction · EPSS 0.82638 · Published 2025-10-03 · Fixed in 8.2.2 CWE-416
Priority HIGH 82
Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the component hiredisAllocFns at /opt/fs/redisraft/deps/hiredis/alloc.c.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00631 · Published 2024-01-23 · No fix listed
Priority HIGH 79
Redis is an in-memory database that persists on disk.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.77422 · Published 2023-07-11 · Partial fix · 7.0.12 CWE-122
Priority HIGH 73
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04458 · Published 2024-10-07 · Partial fix · 6.2.16, 7.2.6 +1 CWE-121
Priority HIGH 73
Redis is an in-memory database that persists on disk.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.41409 · Published 2023-07-13 · Partial fix · 7.0.12, 6.2.13 +1 CWE-122
Priority HIGH 68
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support.
CVSS 4.0HIGH 7.5· Adjacent network · Low privileges · No interaction · EPSS 0.00479 · Published 2026-08-27 · Fixed in 8.2.9, 8.4.6 +10 CWE-416
Priority HIGH 68
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer,…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00872 · Published 2026-07-25 · Fixed in 8.8.0 CWE-415
Priority HIGH 67
Redis is an in-memory database that persists on disk.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02246 · Published 2022-04-27 · Partial fix · 7.0.0, 6.2.7 CWE-94
Priority MEDIUM 63
Redis is an in-memory database that persists on disk.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.71984 · Published 2023-01-20 · Partial fix · 6.2.9, 7.0.8 CWE-190
Priority MEDIUM 60
Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command).
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01309 · Published 2023-07-15 · No fix listed CWE-617
Priority MEDIUM 59
Redis is an in-memory database that persists on disk.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.58526 · Published 2023-03-20 · Fixed in 7.0.10 CWE-77
Priority MEDIUM 59
Redis is an in-memory database that persists on disk.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.59769 · Published 2023-03-01 · Partial fix · 6.0.18, 6.2.11 +1 CWE-407
Priority MEDIUM 58
Redis is an in-memory database that persists on disk.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01498 · Published 2022-04-27 · Partial fix · 6.2.7, 7.0.0 CWE-476
Priority MEDIUM 58
A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.14834 · Published 2016-10-28 · Fixed in 3.2.4 CWE-787
Priority MEDIUM 56
Redis is an in-memory database that persists on disk.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.30103 · Published 2021-07-21 · Fixed in 5.0.13, 6.0.15 +1 CWE-125
Priority MEDIUM 55
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.16206 · Published 2021-10-04 · Partial fix · 6.2.6, 6.0.16 +1 CWE-122
Priority MEDIUM 54
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08182 · Published 2025-01-06 · Partial fix · 7.4.2, 7.2.7 +1 CWE-416
Priority MEDIUM 50
Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user.
CVSS 3.1LOW 3.5· Adjacent network · Low privileges · No interaction · EPSS 0.00319 · Published 2025-07-23 · No fix listed CWE-401
Priority MEDIUM 49
Redis is an in-memory database that persists on disk.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03906 · Published 2022-09-23 · Fixed in 7.0.5 CWE-190
Priority MEDIUM 49
** DISPUTED ** A vulnerability, which was classified as problematic, was found in Redis up to 6.2.7/7.0.5.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00626 · Published 2022-10-21 · No fix listed CWE-404
Priority MEDIUM 49
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.16066 · Published 2021-10-04 · Partial fix · 5.0.14, 6.0.16 +1 CWE-770
Priority MEDIUM 48
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.1353 · Published 2021-10-04 · Partial fix · 6.2.6, 6.0.16 +1 CWE-190
Priority MEDIUM 47
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03916 · Published 2025-10-03 · Fixed in 8.2.2 CWE-190
Priority MEDIUM 46
Redis is an open source, in-memory database that persists on disk.
CVSS 4.0HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.07471 · Published 2025-11-04 · Fixed in 8.2.3 CWE-121
Load more
THREATIST.IORead the docs