A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG SET command can lead to an out of bounds write potentially resulting in code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade redis | Jul 30, 2024 | Oct 28, 2016 |
| Gentoo Linux | — | Upgrade dev-db/redis. | Oct 30, 2017 | Oct 28, 2016 |
| Redislabs Redis | — | Upgrade RedisLabs Redis to the latest version | Aug 15, 2019 | Oct 28, 2016 |
| Suse | — | Upgrade redis | Jun 9, 2021 | Oct 28, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub