Redis.

Redis TLS pending-data list use-after-free

• Redis
• Redis Software (Enterprise)
• Memory corruption

Double free in Redis

• Redis
• Memory corruption

redis-server RESTORE invalid memory access may allow remote code execution

• redis
• Memory corruption

redis-server Lua use-after-free may allow remote code execution

• redis
• Memory corruption

redis-server use-after-free in unblock client flow may allow remote code execution

• redis
• Memory corruption

Redis: Bug in XACKDEL may lead to stack overflow and potential RCE

• redis
• Memory corruption
• CWE-20

Redis Lua Use-After-Free may lead to remote code execution

• redis
• Memory corruption

Redis is vulnerable to DoS via specially crafted LUA scripts

• redis
• Memory corruption

Redis: Authenticated users can execute LUA scripts as a different user

• redis
• Code injection

Lua library commands may lead to integer overflow and potential RCE

• redis
• Memory corruption

Memory leak in Redis

• Redis
• Denial of service

Redis DoS Vulnerability due to bad connection error handling

• redis
• Denial of service

Redis allows out of bounds writes in hyperloglog commands leading to RCE

• redis
• Memory corruption

redis-check-aof may lead to stack overflow and potential RCE

• redis
• Memory corruption
• CWE-20

Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client

• redis
• Denial of service

Redis allows denial-of-service due to malformed ACL selectors

• redis
• CWE-20

Redis' Lua library commands may lead to remote code execution

• redis
• Memory corruption

Lua library commands may lead to stack overflow and RCE in Redis

• redis
• Memory corruption
• CWE-20

Denial-of-service due to unbounded pattern matching in Redis

• redis
• Denial of service

Denial-of-service due to malformed ACL selectors in Redis

• redis
• CWE-20

Redis vulnerable to integer overflow in certain payloads

• redis
• Memory corruption
• CWE-762

Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

• redis
• Information disclosure

Redis SORT_RO may bypass ACL configuration

• redis
• Privilege escalation

Heap overflow issue with the Lua cjson library used by Redis

• redis
• Memory corruption

Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis

• redis
• Memory corruption

`HINCRBYFLOAT` can be used to crash a redis-server process

• redis
• Denial of service
• CWE-20

Specially crafted MSETNX command can lead to denial-of-service

• redis
• Command injection

Integer Overflow in several Redis commands can lead to denial of service.

• redis
• Memory corruption

Redis string pattern matching can be abused to achieve Denial of Service

• redis
• Denial of service

Integer overflow in certain command arguments can drive Redis to OOM panic

• redis
• Memory corruption

Integer overflow in multiple Redis commands can lead to denial-of-service

• redis
• Memory corruption

Redis on Windows dbghelp.dll uncontrolled search path

• Redis
• CWE-426

Redis Crash Report debug.c sigsegvHandler denial of service

• Redis
• Denial of service

Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow

• redis
• Memory corruption

Potential heap overflow in Redis

• redis
• Memory corruption

A Malformed Lua script can crash Redis

• redis
• Memory corruption

Lua scripts can be manipulated to overcome ACL rules in Redis

• redis
• Code injection

Integer overflow issue with strings in Redis

• redis
• Memory corruption

Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms

• redis
• Memory corruption

Integer overflow issue with intsets in Redis

• redis
• Memory corruption

DoS vulnerability in Redis

• redis
• Denial of service

Vulnerability in Lua Debugger in Redis

• redis
• Memory corruption

Integer overflow issue with Streams in Redis

• redis
• Memory corruption

Vulnerability in handling large ziplists

• redis
• Memory corruption

Lua scripts can overflow the heap-based Lua stack in Redis

• redis
• Memory corruption

Integer overflow issues with *BIT commands on 32-bit systems

• redis
• Memory corruption

Redis vulnerability in STRALGO LCS on 32-bit systems

• redis
• Memory corruption

Vulnerability in the COPY command for large intsets

• redis
• Memory corruption

Vulnerability in the STRALGO LCS command

• redis
• Memory corruption

Buffer overflow in redis

• redis
• Memory corruption

Integer overflow on 32-bit systems

• redis
• Memory corruption

Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds.

• Redis

Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm.

• Redis

Stack-based buffer overflow in redis

• redis
• Memory corruption

Heap-based buffer overflow in redis

• redis
• Memory corruption

Redis: A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a…

• Redis