Information on source package redis

Available versions

jessie (security)2:2.8.17-1+deb8u7
stretch (security)3:3.2.6-3+deb9u3
buster (security)5:5.0.3-4+deb10u1

Open issues

CVE-2016-2121vulnerable (no DSA)fixedfixedfixedfixedA permissions flaw was found in redis, which sets weak permissions on ...
CVE-2016-10517vulnerable (no DSA)vulnerable (no DSA)fixedfixedfixednetworking.c in Redis before 3.2.7 allows "Cross Protocol Scripting" b ...

Open unimportant issues

CVE-2017-15047fixedvulnerablefixedfixedfixedThe clusterLoadConfig function in cluster.c in Redis 4.0.2 allows atta ...

Resolved issues

CVE-2019-10193A stack-buffer overflow vulnerability was found in the Redis hyperlogl ...
CVE-2019-10192A heap-buffer overflow vulnerability was found in the Redis hyperloglo ...
CVE-2018-12453Type confusion in the xgroupCommand function in t_stream.c in redis-se ...
CVE-2018-12326Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 ...
CVE-2018-11219An Integer Overflow issue was discovered in the struct library in the ...
CVE-2018-11218Memory Corruption was discovered in the cmsgpack library in the Lua su ...
CVE-2016-8339A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code ...
CVE-2015-8080Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x ...
CVE-2015-4335Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to ex ...
CVE-2013-7458linenoise, as used in Redis before 3.2.3, uses world-readable permissi ...
CVE-2013-0178redis 2.4: Insecure temporary flaw use for redis service's vm swap file

Security announcements

DSA / DLADescription
DSA-4480-1redis - security update
DSA-4480-1redis - security update
DLA-1850-1redis - security update
DLA-1396-1redis - security update
DSA-4230-1redis - security update
DLA-1161-1redis - security update
DSA-3634-1redis - security update
DLA-577-1redis - security update
DSA-3412-1redis - security update
DSA-3279-1redis - security update

Search for package or bug name: Reporting problems