Redis TLS pending-data list use-after-free

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer…

redis-server RESTORE invalid memory access may allow remote code execution

redis-server Lua use-after-free may allow remote code execution

redis-server use-after-free in unblock client flow may allow remote code execution

Redis: Bug in XACKDEL may lead to stack overflow and potential RCE

Redis Lua Use-After-Free may lead to remote code execution

Redis is vulnerable to DoS via specially crafted LUA scripts

Redis: Authenticated users can execute LUA scripts as a different user

Lua library commands may lead to integer overflow and potential RCE

Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs because the server allocates memory for the command arguments of every bulk, even…

Redis DoS Vulnerability due to bad connection error handling

Redis allows out of bounds writes in hyperloglog commands leading to RCE

redis-check-aof may lead to stack overflow and potential RCE

Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client

Redis allows denial-of-service due to malformed ACL selectors

Redis' Lua library commands may lead to remote code execution

Lua library commands may lead to stack overflow and RCE in Redis

Denial-of-service due to unbounded pattern matching in Redis

Denial-of-service due to malformed ACL selectors in Redis

Redis vulnerable to integer overflow in certain payloads

Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

Redis SORT_RO may bypass ACL configuration

Heap overflow issue with the Lua cjson library used by Redis

Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis

`HINCRBYFLOAT` can be used to crash a redis-server process

Specially crafted MSETNX command can lead to denial-of-service

Integer Overflow in several Redis commands can lead to denial of service.

Redis string pattern matching can be abused to achieve Denial of Service

Integer overflow in certain command arguments can drive Redis to OOM panic