The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade redis-develUpgrade redisUpgrade redis-doc | Jan 24, 2025 | Jul 13, 2023 |
| Alpine Linux | — | Upgrade redis | Aug 22, 2024 | Jul 13, 2023 |
| Amazon Linux Ami 2 | — | Upgrade redis-debuginfoUpgrade redis-docUpgrade redis-develUpgrade redis | Sep 28, 2023 | Jul 13, 2023 |
| Amazon_linux_2023 | — | Upgrade redis6-docUpgrade redis6-develUpgrade redis6-debugsourceUpgrade redis6-debuginfoUpgrade redis6 | Feb 17, 2025 | Jul 10, 2023 |
| Debian | — | Upgrade redis | Feb 5, 2024 | Jul 13, 2023 |
| Freebsd | — | Upgrade redis-develUpgrade redisUpgrade redis62Upgrade redis60 | Jul 12, 2023 | Jul 10, 2023 |
| Gentoo Linux | — | Upgrade dev-db/redis. | Aug 8, 2024 | Jul 13, 2023 |
| Oracle_linux | — | Upgrade redis-docUpgrade redisUpgrade redis-devel | Jan 24, 2025 | Jul 10, 2023 |
| Redhat_linux | — | Upgrade redis-develUpgrade redis-docUpgrade redisUpgrade redis-debuginfoUpgrade redis-debugsource | Jan 23, 2025 | Jul 13, 2023 |
| Redislabs Redis | — | Upgrade RedisLabs Redis to version 6.2.13Upgrade RedisLabs Redis to version 6.0.20Upgrade RedisLabs Redis to version 7.0.12 | Oct 17, 2025 | Jul 13, 2023 |
| Rocky_linux | — | Upgrade redisUpgrade redis-debugsourceUpgrade redis-debuginfoUpgrade redis-devel | Feb 14, 2025 | Jul 13, 2023 |
| Suse | — | Upgrade redis7Upgrade redis | Jul 21, 2023 | Jul 13, 2023 |
| Ubuntu | — | Upgrade liblua5.1-bitop-dev (Ubuntu Pro)Upgrade lua-cjson-dev (Ubuntu Pro)Upgrade redis (Ubuntu Pro)Upgrade liblua5.1-0-dev (Ubuntu Pro)Upgrade liblua5.1-0 (Ubuntu Pro)Upgrade redisUpgrade lua-bitop-dev (Ubuntu Pro)Upgrade liblua5.1-bitop0 (Ubuntu Pro)Upgrade redis-tools (Ubuntu Pro)Upgrade redis-sentinelUpgrade redis-sentinel (Ubuntu Pro)Upgrade redis-toolsUpgrade redis-server (Ubuntu Pro)Upgrade lua-bitop (Ubuntu Pro)Upgrade redis-serverUpgrade lua5.1 (Ubuntu Pro)Upgrade lua-cjson (Ubuntu Pro) | Dec 6, 2023 | Jul 13, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 13, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub