수정 버전
설치된 버전 확인
redis-server --version7.4 에 영향을 주는 CVE
| CVE | 제목 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|
| CVE-2025-49844 | Redis Lua Use-After-Free may lead to remote code execution | 10.0 | — | 2025-10-04 | |
| CVE-2026-23479 | redis-server use-after-free in unblock client flow may allow remote code execution | 7.7 | — | 2026-05-06 | |
| CVE-2026-25243 | redis-server RESTORE invalid memory access may allow remote code execution | 7.7 | — | 2026-05-06 | |
| CVE-2025-21605 | Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client | 7.5 | — | 2025-04-24 | |
| CVE-2025-48367 | Redis DoS Vulnerability due to bad connection error handling | 7.5 | — | 2025-07-08 | |
| CVE-2024-31449 | Lua library commands may lead to stack overflow and RCE in Redis | 7.0 | — | 2024-10-08 | |
| CVE-2024-46981 | Redis' Lua library commands may lead to remote code execution | 7.0 | — | 2025-01-07 | |
| CVE-2025-32023 | Redis allows out of bounds writes in hyperloglog commands leading to RCE | 7.0 | — | 2025-07-08 | |
| CVE-2025-46817 | Lua library commands may lead to integer overflow and potential RCE | 7.0 | — | 2025-10-04 | |
| CVE-2025-46819 | Redis is vulnerable to DoS via specially crafted LUA scripts | 6.3 | — | 2025-10-04 | |
| CVE-2026-23631 | redis-server Lua use-after-free may allow remote code execution | 6.1 | — | 2026-05-06 | |
| CVE-2025-46818 | Redis: Authenticated users can execute LUA scripts as a different user | 6.0 | — | 2025-10-04 | |
| CVE-2024-31228 | Denial-of-service due to unbounded pattern matching in Redis | 5.5 | — | 2024-10-08 | |
| CVE-2025-27151 | redis-check-aof may lead to stack overflow and potential RCE | 4.7 | — | 2025-05-29 | |
| CVE-2024-31227 | Denial-of-service due to malformed ACL selectors in Redis | 4.4 | — | 2024-10-08 | |
| CVE-2024-51741 | Redis allows denial-of-service due to malformed ACL selectors | 4.4 | — | 2025-01-07 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).