Behoben in
Version prüfen
redis-server --versionCVEs, die 7.0 betreffen
| CVE | Titel | CVSS | Ausgenutzt | EPSS | Veröffentlicht |
|---|---|---|---|---|---|
| CVE-2025-49844 | Redis Lua Use-After-Free may lead to remote code execution | 10.0 | — | 2025-10-04 | |
| CVE-2023-41056 | Redis vulnerable to integer overflow in certain payloads | 8.1 | — | 2024-01-11 | |
| CVE-2026-25243 | redis-server RESTORE invalid memory access may allow remote code execution | 7.7 | — | 2026-05-06 | |
| CVE-2022-33105 | Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID. | 7.5 | — | 2022-06-22 | |
| CVE-2023-31655 | redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause... | 7.5 | — | 2023-05-18 | |
| CVE-2025-21605 | Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client | 7.5 | — | 2025-04-24 | |
| CVE-2025-48367 | Redis DoS Vulnerability due to bad connection error handling | 7.5 | — | 2025-07-08 | |
| CVE-2023-36824 | Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis | 7.4 | — | 2023-07-12 | |
| CVE-2022-31144 | Potential heap overflow in Redis | 7.0 | — | 2022-07-20 | |
| CVE-2022-35951 | Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow | 7.0 | — | 2022-09-23 | |
| CVE-2022-24834 | Heap overflow issue with the Lua cjson library used by Redis | 7.0 | — | 2023-07-13 | |
| CVE-2025-46817 | Lua library commands may lead to integer overflow and potential RCE | 7.0 | — | 2025-10-04 | |
| CVE-2025-46819 | Redis is vulnerable to DoS via specially crafted LUA scripts | 6.3 | — | 2025-10-04 | |
| CVE-2026-23631 | redis-server Lua use-after-free may allow remote code execution | 6.1 | — | 2026-05-06 | |
| CVE-2025-46818 | Redis: Authenticated users can execute LUA scripts as a different user | 6.0 | — | 2025-10-04 | |
| CVE-2022-35977 | Integer overflow in certain command arguments can drive Redis to OOM panic | 5.5 | — | 2023-01-21 | |
| CVE-2023-22458 | Integer overflow in multiple Redis commands can lead to denial-of-service | 5.5 | — | 2023-01-21 | |
| CVE-2022-36021 | Redis string pattern matching can be abused to achieve Denial of Service | 5.5 | — | 2023-03-02 | |
| CVE-2023-25155 | Integer Overflow in several Redis commands can lead to denial of service. | 5.5 | — | 2023-03-02 | |
| CVE-2023-28425 | Specially crafted MSETNX command can lead to denial-of-service | 5.5 | — | 2023-03-21 | |
| CVE-2023-28856 | `HINCRBYFLOAT` can be used to crash a redis-server process | 5.5 | — | 2023-04-19 | |
| CVE-2025-27151 | redis-check-aof may lead to stack overflow and potential RCE | 4.7 | — | 2025-05-29 | |
| CVE-2024-31227 | Denial-of-service due to malformed ACL selectors in Redis | 4.4 | — | 2024-10-08 | |
| CVE-2024-51741 | Redis allows denial-of-service due to malformed ACL selectors | 4.4 | — | 2025-01-07 | |
| CVE-2022-24735 | Lua scripts can be manipulated to overcome ACL rules in Redis | 3.9 | — | 2022-04-28 | |
| CVE-2023-45145 | Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window. | 3.6 | — | 2023-10-19 | |
| CVE-2022-24736 | A Malformed Lua script can crash Redis | 3.3 | — | 2022-04-28 | |
| CVE-2023-41053 | Redis SORT_RO may bypass ACL configuration | 3.3 | — | 2023-09-07 | |
| CVE-2022-3647 | Redis Crash Report debug.c sigsegvHandler denial of service | 3.1 | — | 2022-10-21 |
Verfolgen Sie diese Versionen auf Ihren eigenen Servern
InfraGuard erfasst die installierten Softwareversionen auf jedem Server und markiert diejenigen mit bekannten Schwachstellen. Self-Hosted – nichts verlässt Ihr Netzwerk.
Daten: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (siehe EPSS unter https://www.first.org/epss), endoflife.date. Softwareliste: awesome-selfhosted (CC BY-SA 3.0).