Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlen(filepath) when copying a user-supplied file path into a fixed-size stack buffer. This allows an attacker to overflow the stack and potentially achieve code execution. This issue has been patched in version 8.0.2.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-redisalma-upgrade-redis-develalma-upgrade-redis-doc | Jul 31, 2025 | Jul 28, 2025 | |
| Alpine Linux | alpine-linux-upgrade-redisalpine-linux-upgrade-valkeyalpine-linux-upgrade-redict | Aug 8, 2025 | May 29, 2025 | |
| Debian | debian-upgrade-redis | Jun 3, 2025 | May 29, 2025 | |
| Freebsd | freebsd-upgrade-package-redisfreebsd-upgrade-package-redis74freebsd-upgrade-package-redis72freebsd-upgrade-package-valkey | Jul 8, 2025 | Jul 7, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-redisoracle-linux-upgrade-redis-develoracle-linux-upgrade-redis-docoracle-linux-upgrade-valkeyoracle-linux-upgrade-valkey-devel | Jul 22, 2025 | May 29, 2025 |
| Redhat_linux | redhat-upgrade-redisredhat-upgrade-redis-debuginforedhat-upgrade-redis-debugsourceredhat-upgrade-redis-develredhat-upgrade-redis-docredhat-upgrade-valkeyredhat-upgrade-valkey-debuginforedhat-upgrade-valkey-debugsourceredhat-upgrade-valkey-devel | Jul 9, 2025 | May 29, 2025 | |
| Redislabs Redis | redislabs-redis-upgrade-7_2_9redislabs-redis-upgrade-7_4_4redislabs-redis-upgrade-8_0_2 | Apr 17, 2026 | May 29, 2025 | |
| Rocky_linux | rocky-upgrade-redisrocky-upgrade-redis-debuginforocky-upgrade-redis-debugsourcerocky-upgrade-redis-develrocky-upgrade-valkeyrocky-upgrade-valkey-debuginforocky-upgrade-valkey-debugsourcerocky-upgrade-valkey-devel | Feb 5, 2026 | Oct 4, 2025 | |
| Suse | — | suse-upgrade-redissuse-upgrade-redis7suse-upgrade-valkeysuse-upgrade-valkey-compat-redissuse-upgrade-valkey-devel | Dec 5, 2025 | Jul 31, 2025 |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Feb 9, 2026 | May 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub