Redis

Records60All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high32CVSS 7.0–8.9

Exploited now

Redis records in CISA KEV

TI-2022-00463 Debian-specific Redis Server Lua Sandbox Escape Vulnerability CRITICAL 100KEV 2022-03-28

Components

Products in the NVD configurations · select one to filter the records

Redis 46 records CRITICAL Redis-py 2 records LOW Hiredis 1 record MEDIUM Redisraft 1 record HIGH

Records

46 records in Redis · all components

TI-2022-00463 CVE-2022-0543 · GHSA-9wpj-h5jq-88p9

Missing authorization in Debian redis

CRITICAL 100KEV

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99351 Published 2022-02-18 No fix listed CWE-862

TI-2025-31759 CVE-2025-49844

Redis Lua Use-After-Free may lead to remote code execution

HIGH 84

Redis is an open source, in-memory database that persists on disk.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.82638 Published 2025-10-03 Fixed in 8.2.2 CWE-416

TI-2023-18618 CVE-2023-36824

Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis

HIGH 79

Redis is an in-memory database that persists on disk.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.77422 Published 2023-07-11 Partial fix · 7.0.12 CWE-122

TI-2024-20813 CVE-2024-31449

Lua library commands may lead to stack overflow and RCE in Redis

HIGH 73

Redis is an open source, in-memory database that persists on disk.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04458 Published 2024-10-07 Partial fix · 6.2.16, 7.2.6 +1 CWE-121

TI-2022-08647 CVE-2022-24834

Heap overflow issue with the Lua cjson library used by Redis

HIGH 73

Redis is an in-memory database that persists on disk.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.41409 Published 2023-07-13 Partial fix · 7.0.12, 6.2.13 +1 CWE-122

TI-2022-08549 CVE-2022-24735

Lua scripts can be manipulated to overcome ACL rules in Redis

HIGH 67

Redis is an in-memory database that persists on disk.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02246 Published 2022-04-27 Partial fix · 7.0.0, 6.2.7 CWE-94

TI-2023-08708 CVE-2023-22458

Integer overflow in multiple Redis commands can lead to denial-of-service

MEDIUM 63

Redis is an in-memory database that persists on disk.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.71984 Published 2023-01-20 Partial fix · 6.2.9, 7.0.8 CWE-190

TI-2021-11465 CVE-2021-31294 · GHSA-g2jg-2qcv-q3h9

Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server…

MEDIUM 60

Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01309 Published 2023-07-15 No fix listed CWE-617

TI-2023-12970 CVE-2023-28425

Specially crafted MSETNX command can lead to denial-of-service

MEDIUM 59

Redis is an in-memory database that persists on disk.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.58526 Published 2023-03-20 Fixed in 7.0.10 CWE-77

TI-2022-16446 CVE-2022-36021

Redis string pattern matching can be abused to achieve Denial of Service

MEDIUM 59

Redis is an in-memory database that persists on disk.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.59769 Published 2023-03-01 Partial fix · 6.0.18, 6.2.11 +1 CWE-407

TI-2022-08550 CVE-2022-24736

A Malformed Lua script can crash Redis

MEDIUM 58

Redis is an in-memory database that persists on disk.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01498 Published 2022-04-27 Partial fix · 6.2.7, 7.0.0 CWE-476

TI-2021-12295 CVE-2021-32626

Lua scripts can overflow the heap-based Lua stack in Redis

MEDIUM 55

Redis is an open source, in-memory database that persists on disk.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.16206 Published 2021-10-04 Partial fix · 6.2.6, 6.0.16 +1 CWE-122

TI-2024-31370 CVE-2024-46981

Redis' Lua library commands may lead to remote code execution

MEDIUM 54

Redis is an open source, in-memory database that persists on disk.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08182 Published 2025-01-06 Partial fix · 7.4.2, 7.2.7 +1 CWE-416

TI-2022-16378 CVE-2022-35951

Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow

MEDIUM 49

Redis is an in-memory database that persists on disk.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03906 Published 2022-09-23 Fixed in 7.0.5 CWE-190

TI-2022-03354 CVE-2022-3647 · GHSA-8vvp-2mv7-px5c

Redis Crash Report debug.c sigsegvHandler denial of service

MEDIUM 49

** DISPUTED ** A vulnerability, which was classified as problematic, was found in Redis up to 6.2.7/7.0.5.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00626 Published 2022-10-21 No fix listed CWE-404

TI-2021-12343 CVE-2021-32675

DoS vulnerability in Redis

MEDIUM 49

Redis is an open source, in-memory database that persists on disk.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.16066 Published 2021-10-04 Partial fix · 5.0.14, 6.0.16 +1 CWE-770

TI-2021-12297 CVE-2021-32628

Vulnerability in handling large ziplists

MEDIUM 48

Redis is an open source, in-memory database that persists on disk.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.1353 Published 2021-10-04 Partial fix · 6.2.6, 6.0.16 +1 CWE-190

TI-2025-29450 CVE-2025-46817

Lua library commands may lead to integer overflow and potential RCE

MEDIUM 47

Redis is an open source, in-memory database that persists on disk.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03916 Published 2025-10-03 Fixed in 8.2.2 CWE-190

TI-2025-38748 CVE-2025-62507

Redis: Bug in XACKDEL may lead to stack overflow and potential RCE

MEDIUM 46

Redis is an open source, in-memory database that persists on disk.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.07471 Published 2025-11-04 Fixed in 8.2.3 CWE-121

TI-2022-13187 CVE-2022-31144

Potential heap overflow in Redis

MEDIUM 46

Redis is an in-memory database that persists on disk.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03241 Published 2022-07-19 Partial fix · 7.0.4 CWE-122

TI-2025-23147 CVE-2025-32023

Redis allows out of bounds writes in hyperloglog commands leading to RCE

MEDIUM 45

Redis is an open source, in-memory database that persists on disk.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.06473 Published 2025-07-07 Partial fix · 8.0.3, 7.4.5 +2 CWE-680

TI-2025-20008 CVE-2025-27151

redis-check-aof may lead to stack overflow and potential RCE

MEDIUM 44

Redis is an open source, in-memory database that persists on disk.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01058 Published 2025-05-29 Partial fix · 8.0.2 CWE-121

TI-2022-03429 CVE-2022-3734 · GHSA-4x76-2j9h-q9r9

Redis on Windows dbghelp.dll uncontrolled search path

MEDIUM 44

A vulnerability was found in a port or fork of Redis.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00837 Published 2022-10-28 No fix listed CWE-426

TI-2021-12429 CVE-2021-32762

Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms

MEDIUM 43

Redis is an open source, in-memory database that persists on disk.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02579 Published 2021-10-04 Partial fix · 5.0.14, 6.0.16 +1 CWE-190

TI-2026-20391 CVE-2026-25243

redis-server RESTORE invalid memory access may allow remote code execution

MEDIUM 42

Redis is an in-memory data structure store.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.04033 Published 2026-05-05 Fixed in 8.6.3 CWE-122

Open these records in search →

Critical	8
High	32
Medium	14
Low	6
No CVSS	0