Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command). NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade redis | Jul 30, 2024 | Jul 15, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 15, 2023 |
| Redislabs Redis | — | Upgrade RedisLabs Redis to version 6.2.0 | Oct 17, 2025 | Jul 15, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub