Количество 54
Количество 54
SUSE-SU-2026:2099-1
Security update for redis
SUSE-SU-2026:1950-1
Security update for valkey
SUSE-SU-2026:1949-1
Security update for valkey
RLSA-2026:25925
Important: valkey security update
RLSA-2026:25219
Important: redis:7 security update
RLSA-2026:25216
Important: valkey security update
ELSA-2026-25925
ELSA-2026-25925: valkey security update (IMPORTANT)
ELSA-2026-25219
ELSA-2026-25219: redis:7 security update (IMPORTANT)
ELSA-2026-25216
ELSA-2026-25216: valkey security update (IMPORTANT)
openSUSE-SU-2026:20776-1
Security update for valkey
openSUSE-SU-2026:21612-1
Security update for redis
ALT-PU-2026-9032
ALT-PU-2026-9032: package `redis` update to version 8.6.4-alt1
ALT-PU-2026-8819
ALT-PU-2026-8819: package `redis` update to version 8.6.4-alt1
ALT-PU-2026-8793
ALT-PU-2026-8793: package `valkey` update to version 8.1.8-alt1
SUSE-SU-2026:2100-1
Security update for redis7
SUSE-SU-2026:2097-1
Security update for redis7
CVE-2026-23479
Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger a use-after-free that may lead to remote code execution. This has been patched in version 8.6.3.
CVE-2026-23479
Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger a use-after-free that may lead to remote code execution. This has been patched in version 8.6.3.
CVE-2026-23479
Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger a use-after-free that may lead to remote code execution. This has been patched in version 8.6.3.
CVE-2026-23479
redis-server use-after-free in unblock client flow may allow remote code execution
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | SUSE-SU-2026:2099-1 Security update for redis | 5 месяцев назад | ||
| SUSE-SU-2026:1950-1 Security update for valkey | 6 месяцев назад | ||
| SUSE-SU-2026:1949-1 Security update for valkey | 6 месяцев назад | ||
 | RLSA-2026:25925 Important: valkey security update | 5 месяцев назад | ||
| RLSA-2026:25219 Important: redis:7 security update | 5 месяцев назад | ||
| RLSA-2026:25216 Important: valkey security update | 5 месяцев назад | ||
| ELSA-2026-25925 ELSA-2026-25925: valkey security update (IMPORTANT) | 4 месяца назад | ||
| ELSA-2026-25219 ELSA-2026-25219: redis:7 security update (IMPORTANT) | 5 месяцев назад | ||
| ELSA-2026-25216 ELSA-2026-25216: valkey security update (IMPORTANT) | 4 месяца назад | ||
| openSUSE-SU-2026:20776-1 Security update for valkey | 6 месяцев назад | ||
| openSUSE-SU-2026:21612-1 Security update for redis | 3 месяца назад | ||
 | ALT-PU-2026-9032 ALT-PU-2026-9032: package `redis` update to version 8.6.4-alt1 | CVSS3: 8.8 | 5 месяцев назад | |
| ALT-PU-2026-8819 ALT-PU-2026-8819: package `redis` update to version 8.6.4-alt1 | CVSS3: 8.8 | 5 месяцев назад | |
| ALT-PU-2026-8793 ALT-PU-2026-8793: package `valkey` update to version 8.1.8-alt1 | CVSS3: 8.8 | 5 месяцев назад | |
| SUSE-SU-2026:2100-1 Security update for redis7 | 5 месяцев назад | ||
| SUSE-SU-2026:2097-1 Security update for redis7 | 5 месяцев назад | ||
 | CVE-2026-23479 Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger a use-after-free that may lead to remote code execution. This has been patched in version 8.6.3. | CVSS3: 8.8 | 3% Низкий | 6 месяцев назад |
 | CVE-2026-23479 Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger a use-after-free that may lead to remote code execution. This has been patched in version 8.6.3. | CVSS3: 7.5 | 3% Низкий | 6 месяцев назад |
| CVE-2026-23479 Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger a use-after-free that may lead to remote code execution. This has been patched in version 8.6.3. | CVSS3: 8.8 | 3% Низкий | 6 месяцев назад |
 | CVE-2026-23479 redis-server use-after-free in unblock client flow may allow remote code execution | 3% Низкий | 5 месяцев назад |
Уязвимостей на страницу