Advisories · Technology
valkey.
Every CVE that names valkey among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
valkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds
- valkey
- Memory corruption
- CVSS 6.9 Medium
valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds
- valkey
- Memory corruption
- CVSS 4.8 Medium
valkey-io valkey Module Timer module.c moduleTimerHandler double free
- valkey
- Memory corruption
- CVSS 2.1 Low
valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free
- valkey
- Memory corruption
- CVSS 8.8 High
Valkey: UAF in stream deserialization may lead to remote code execution
- valkey
- Memory corruption
- CVSS 7.5 High
Valkey: TLS pending-data processing use-after-free may allow remote code execution
- valkey
- Memory corruption
- CVSS 7.5 High
Valkey has Pre-Authentication DOS from malformed RESP request
- valkey
- Denial of service
- CWE-20
- CVSS 7.5 High
Malformed Valkey Cluster bus message can lead to Remote DoS
- valkey
- Memory corruption
- CVSS 8.5 High
Valkey Affected by RESP Protocol Injection via Lua error_reply
- valkey
- Other injection
- CWE-170
- CVSS 3.1 Low
Integer underflow in Valkey
- Valkey
- Memory corruption