← Back

Redis

redis

Vendor: Redislabs • 22 CVEs

CVEs (22)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
4Debian
OpensuseRedhat+1 more
5Debian Linux
LeapOpenstack+2 more
May 6, 2026
Apr 13, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of servi...Show more
Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.Show less
2Debian
Redislabs
2Debian Linux
Redis
May 6, 2026
Jun 9, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.