Описание
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.
A flaw was found in Redis. This vulnerability, a use-after-free, exists within the tlsProcessPendingData() function, which manages the Transport Layer Security (TLS) pending-data list when Redis is configured with TLS support. A remote, unauthenticated attacker could exploit this to execute unauthorized commands with the same privileges as the Redis server.
Отчет
This is an Important flaw in Redis, enabling remote, unauthenticated attackers to achieve arbitrary code execution. The vulnerability specifically impacts Redis instances configured with TLS support, which is not enabled by default in Red Hat Enterprise Linux, thereby limiting exposure in standard deployments.
Меры по смягчению последствий
For Redis instances where TLS is enabled, consider disabling TLS if it is not strictly required. Alternatively, restrict network access to the Redis server to trusted clients only, using firewall rules or network access controls, to prevent unauthenticated remote attackers from reaching the vulnerable service. If TLS is enabled, a restart of the Redis service may be required for changes to take effect.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Hardened Images | boost | Not affected | ||
| Red Hat Hardened Images | valkey | Not affected | ||
| Red Hat Enterprise Linux 8 | redis | Fixed | RHSA-2026:64823 | 08.09.2026 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | redis | Fixed | RHSA-2026:69542 | 21.09.2026 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | redis | Fixed | RHSA-2026:69542 | 21.09.2026 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | redis | Fixed | RHSA-2026:69534 | 21.09.2026 |
| Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | redis | Fixed | RHSA-2026:69534 | 21.09.2026 |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | redis | Fixed | RHSA-2026:69533 | 21.09.2026 |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | redis | Fixed | RHSA-2026:69533 | 21.09.2026 |
| Red Hat Enterprise Linux 9 | redis | Fixed | RHSA-2026:64824 | 08.09.2026 |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.
Redis contains a use-after-free vulnerability in the 'tlsProcessPendin ...
EPSS
7.5 High
CVSS3