Skip to content
Fencer Intel

All · Redis

Newest first, late arrivals on top. Also a feed.

  1. 5.5
    CVE-2023-28856 `HINCRBYFLOAT` can be used to crash a redis-server process
    Redisbitnami
    EPSS 1.3% chance of exploitation in 30 days, percentile 69%
  2. 5.5
    CVE-2023-28425 Specially crafted MSETNX command can lead to denial-of-service
    Redisbitnami
    EPSS 58.5% chance of exploitation in 30 days, percentile 99.1%
  3. 5.5
    CVE-2023-25155 Integer Overflow in several Redis commands can lead to denial of service.
    Redisbitnami
  4. 5.5
    CVE-2022-36021 Redis string pattern matching can be abused to achieve Denial of Service
    Redisbitnami
    EPSS 59.8% chance of exploitation in 30 days, percentile 99.1%
  5. 5.5
    CVE-2023-22458 Integer overflow in multiple Redis commands can lead to denial-of-service
    Redisbitnami
    EPSS 72.0% chance of exploitation in 30 days, percentile 99.4%
  6. 5.5
    CVE-2022-35977 Integer overflow in certain command arguments can drive Redis to OOM panic
    Redisbitnami
    EPSS 14.0% chance of exploitation in 30 days, percentile 96%
  7. 6.3
    CVE-2022-3734 Redis on Windows dbghelp.dll uncontrolled search path
    Redisbitnami
  8. 3.1
    CVE-2022-3647 Redis Crash Report debug.c sigsegvHandler denial of service
    Redisbitnami
  9. 7.0
    CVE-2022-35951 Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow
    Redisbitnami
    EPSS 3.9% chance of exploitation in 30 days, percentile 90%
  10. 7.0
    CVE-2022-31144 Potential heap overflow in Redis
    Redisbitnami
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%
  11. 7.5
    CVE-2022-33105 Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID.
    Redisbitnami
    EPSS 3.1% chance of exploitation in 30 days, percentile 87%
  12. 3.9
    CVE-2022-24735 Lua scripts can be manipulated to overcome ACL rules in Redis
    Redisbitnami
    EPSS 2.2% chance of exploitation in 30 days, percentile 83%
  13. 3.3
    CVE-2022-24736 A Malformed Lua script can crash Redis
    Redisbitnami
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  14. 6.4
    GHSA-px78-xgh7-74fw DEBUG command is dangerous and enabled by default
    Redis unreviewed · maintainers only
  15. 10.0
    CVE-2022-0543 It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escap…
    Redisbitnami
    kev 1 public exploit EPSS 99.4% chance of exploitation in 30 days, percentile 99.9%
  16. 7.5
    CVE-2021-41099 Integer overflow issue with strings in Redis
    Redisbitnami
    EPSS 3.5% chance of exploitation in 30 days, percentile 89%
  17. 7.5
    CVE-2021-32762 Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms
    Redisbitnami
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  18. 7.5
    CVE-2021-32687 Integer overflow issue with intsets in Redis
    Redisbitnami
    EPSS 4.1% chance of exploitation in 30 days, percentile 90%
  19. 7.5
    CVE-2021-32675 DoS vulnerability in Redis
    Redisbitnami
    EPSS 16.1% chance of exploitation in 30 days, percentile 96%
  20. 5.3
    CVE-2021-32672 Vulnerability in Lua Debugger in Redis
    Redisbitnami
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  21. 7.5
    CVE-2021-32628 Vulnerability in handling large ziplists
    Redisbitnami
    EPSS 13.0% chance of exploitation in 30 days, percentile 96%
  22. 7.5
    CVE-2021-32627 Integer overflow issue with Streams in Redis
    Redisbitnami
    EPSS 3.8% chance of exploitation in 30 days, percentile 90%
  23. 7.5
    CVE-2021-32626 Lua scripts can overflow the heap-based Lua stack in Redis
    Redisbitnami
    EPSS 15.6% chance of exploitation in 30 days, percentile 96%
  24. 7.5
    CVE-2020-21468 A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS).
    Redis
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  25. 7.5
    CVE-2021-32761 Integer overflow issues with *BIT commands on 32-bit systems
    Redis maintainer advisory
    EPSS 30.1% chance of exploitation in 30 days, percentile 98%
  26. 7.5
    CVE-2021-32625 Redis vulnerability in STRALGO LCS on 32-bit systems
    Redis maintainer advisory
    EPSS 4.1% chance of exploitation in 30 days, percentile 91%
  27. 7.5
    CVE-2021-29477 Vulnerability in the STRALGO LCS command
    Redis maintainer advisory
    EPSS 4.0% chance of exploitation in 30 days, percentile 90%
  28. 7.5
    CVE-2021-29478 Vulnerability in the COPY command for large intsets
    Redis maintainer advisory
    EPSS 3.6% chance of exploitation in 30 days, percentile 89%
  29. 5.3
    CVE-2021-3470 A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than je…
    Redis
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  30. 5.4
    CVE-2021-21309 Integer overflow on 32-bit systems
    Redis maintainer advisory
    EPSS 4.8% chance of exploitation in 30 days, percentile 92%