Поиск уязвимостей
Количество 14
Количество 14
GHSA-3gvw-xg56-j2xm
In Redis community the cluster bus PING/PONG/MEET packet parser validated extension padding and total length but never checked that string-carrying extensions are properly null-terminated, allowing a crafted packet to trigger out-of-bounds reads when the payload is later consumed as a C string. This vulnerability can potentially lead to loss of confidentiality or remote denial of service. Redis Software / Redis Enterprise are not affected by this issue.
CVE-2026-92925
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).
CVE-2026-92925
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).
CVE-2026-92925
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).
CVE-2026-92925
A flaw was found in Redis community. The cluster bus packet parser, re ...
openSUSE-SU-2026:21985-1
Security update for valkey
SUSE-SU-2026:5102-1
Security update for valkey
SUSE-SU-2026:5092-1
Security update for valkey
SUSE-SU-2026:4493-1
Security update for valkey
SUSE-SU-2026:4491-1
Security update for valkey
SUSE-SU-2026:4377-1
Security update for redis7
SUSE-SU-2026:4375-1
Security update for redis7
SUSE-SU-2026:4370-1
Security update for redis
RLSA-2026:65120
Important: redis:7 security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-3gvw-xg56-j2xm In Redis community the cluster bus PING/PONG/MEET packet parser validated extension padding and total length but never checked that string-carrying extensions are properly null-terminated, allowing a crafted packet to trigger out-of-bounds reads when the payload is later consumed as a C string. This vulnerability can potentially lead to loss of confidentiality or remote denial of service. Redis Software / Redis Enterprise are not affected by this issue. | CVSS3: 7.1 | 1% Низкий | около 2 месяцев назад |
 | CVE-2026-92925 A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS). | CVSS3: 7.1 | 1% Низкий | около 2 месяцев назад |
 | CVE-2026-92925 A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS). | CVSS3: 7.1 | 1% Низкий | около 2 месяцев назад |
 | CVE-2026-92925 A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS). | CVSS3: 7.1 | 1% Низкий | около 2 месяцев назад |
| CVE-2026-92925 A flaw was found in Redis community. The cluster bus packet parser, re ... | CVSS3: 7.1 | 1% Низкий | около 2 месяцев назад |
 | openSUSE-SU-2026:21985-1 Security update for valkey | 1% Низкий | около 1 месяца назад | |
| SUSE-SU-2026:5102-1 Security update for valkey | 1% Низкий | 5 дней назад | |
| SUSE-SU-2026:5092-1 Security update for valkey | 1% Низкий | 5 дней назад | |
| SUSE-SU-2026:4493-1 Security update for valkey | 1% Низкий | около 1 месяца назад | |
| SUSE-SU-2026:4491-1 Security update for valkey | 1% Низкий | около 1 месяца назад | |
| SUSE-SU-2026:4377-1 Security update for redis7 | 1% Низкий | около 1 месяца назад | |
| SUSE-SU-2026:4375-1 Security update for redis7 | 1% Низкий | около 1 месяца назад | |
| SUSE-SU-2026:4370-1 Security update for redis | 1% Низкий | около 1 месяца назад | |
 | RLSA-2026:65120 Important: redis:7 security update | 2 месяца назад |
Уязвимостей на страницу