Поиск уязвимостей
Количество 24
Количество 24
BDU:2025-00214
Уязвимость системы управления базами данных (СУБД) Redis, связанная с использованием памяти после её освобождения, позволяющая нарушителю выполнить произвольный код
ALT-PU-2025-1294
ALT-PU-2025-1294: package `redis` update to version 6.2.17-alt1
ROS-20250114-13
Множественные уязвимости redis
ALT-PU-2025-1851
ALT-PU-2025-1851: package `valkey` update to version 8.0.2-alt1
ALT-PU-2025-9766
ALT-PU-2025-9766: package `redis` update to version 7.2.10-alt1
CVE-2024-46981
Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.
CVE-2024-46981
Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.
CVE-2024-46981
Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.
CVE-2024-46981
Redis' Lua library commands may lead to remote code execution
CVE-2024-46981
Redis is an open source, in-memory database that persists on disk. An ...
ALT-PU-2023-4982
ALT-PU-2023-4982: package `redis` update to version 7.0.12-alt1
SUSE-SU-2025:0162-1
Security update for redis
GHSA-39h2-x6c4-6w4c
Lua library commands may lead to remote code execution
ALT-PU-2025-13204
ALT-PU-2025-13204: package `redis` update to version 7.2.11-alt1
SUSE-SU-2025:0163-1
Security update for redis
SUSE-SU-2025:0161-1
Security update for redis7
SUSE-SU-2025:0160-1
Security update for redis7
RLSA-2025:0692
Important: redis:7 security update
ELSA-2025-0692
ELSA-2025-0692: redis:7 security update (IMPORTANT)
SUSE-SU-2025:0081-1
Security update for redis
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-00214 Уязвимость системы управления базами данных (СУБД) Redis, связанная с использованием памяти после её освобождения, позволяющая нарушителю выполнить произвольный код | CVSS3: 7 | 8% Низкий | почти 2 года назад |
| ALT-PU-2025-1294 ALT-PU-2025-1294: package `redis` update to version 6.2.17-alt1 | CVSS3: 9.8 | 8% Низкий | почти 2 года назад |
 | ROS-20250114-13 Множественные уязвимости redis | CVSS3: 4.4 | почти 2 года назад | |
| ALT-PU-2025-1851 ALT-PU-2025-1851: package `valkey` update to version 8.0.2-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2025-9766 ALT-PU-2025-9766: package `redis` update to version 7.2.10-alt1 | CVSS3: 9.8 | больше 1 года назад | |
 | CVE-2024-46981 Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands. | CVSS3: 9.8 | 8% Низкий | почти 2 года назад |
 | CVE-2024-46981 Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands. | CVSS3: 7 | 8% Низкий | почти 2 года назад |
 | CVE-2024-46981 Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands. | CVSS3: 9.8 | 8% Низкий | почти 2 года назад |
 | CVE-2024-46981 Redis' Lua library commands may lead to remote code execution | CVSS3: 7 | 8% Низкий | почти 2 года назад |
| CVE-2024-46981 Redis is an open source, in-memory database that persists on disk. An ... | CVSS3: 9.8 | 8% Низкий | почти 2 года назад |
| ALT-PU-2023-4982 ALT-PU-2023-4982: package `redis` update to version 7.0.12-alt1 | CVSS3: 9.8 | около 3 лет назад | |
 | SUSE-SU-2025:0162-1 Security update for redis | 8% Низкий | почти 2 года назад | |
| GHSA-39h2-x6c4-6w4c Lua library commands may lead to remote code execution | CVSS3: 7 | 8% Низкий | почти 2 года назад |
| ALT-PU-2025-13204 ALT-PU-2025-13204: package `redis` update to version 7.2.11-alt1 | CVSS3: 9.9 | около 1 года назад | |
| SUSE-SU-2025:0163-1 Security update for redis | почти 2 года назад | ||
| SUSE-SU-2025:0161-1 Security update for redis7 | почти 2 года назад | ||
| SUSE-SU-2025:0160-1 Security update for redis7 | почти 2 года назад | ||
 | RLSA-2025:0692 Important: redis:7 security update | больше 1 года назад | ||
| ELSA-2025-0692 ELSA-2025-0692: redis:7 security update (IMPORTANT) | почти 2 года назад | ||
| SUSE-SU-2025:0081-1 Security update for redis | почти 2 года назад |
Уязвимостей на страницу