Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-67733

Опубликовано: 26 фев. 2026
Источник: msrc
CVSS3: 8.5
EPSS Низкий

Описание

Valkey Affected by RESP Protocol Injection via Lua error_reply

EPSS

Процентиль: 5%
0.0002
Низкий

8.5 High

CVSS3

Связанные уязвимости

CVSS3: 8.5
ubuntu
около 1 месяца назад

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampered data to other users on the same connection. The error handling code for lua scripts does not properly handle null characters. Versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12 fix the issue.

CVSS3: 7.1
redhat
около 1 месяца назад

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampered data to other users on the same connection. The error handling code for lua scripts does not properly handle null characters. Versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12 fix the issue.

CVSS3: 8.5
nvd
около 1 месяца назад

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampered data to other users on the same connection. The error handling code for lua scripts does not properly handle null characters. Versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12 fix the issue.

CVSS3: 8.5
debian
около 1 месяца назад

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8 ...

suse-cvrf
21 день назад

Security update for valkey

EPSS

Процентиль: 5%
0.0002
Низкий

8.5 High

CVSS3