IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.1Alta

CVE-2026-81934Redis TLS pending-data list use-after-free

Redis Redis; Redis Redis Software (Enterprise) Publicada: (hace 2 meses)

Descripción

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.

Debilidad (CWE): CWE-416

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Redis Redis fixed 8.2.9, fixed 8.4.6, fixed 8.6.6, fixed 8.8.2, fixed 8.10.1, fixed 7.4.11, fixed 6.2.24, fixed 7.2.16, < 8.8.2, < 8.2.9, < 8.4.6, < 8.6.6, < 8.10.1, < 7.4.11, < 6.2.24, < 7.2.16
Redis Redis Software (Enterprise) fixed 8.2.0-46, fixed 8.0.20-96, fixed 7.22.2-179, fixed 7.8.6-303, < 8.2.0-46, < 8.0.20-96, < 7.22.2-179, < 7.8.6-303

Referencias y parches

  • url patch
  • url exploit
  • url release-notes
  • url release-notes
  • url release-notes
  • url release-notes
  • url release-notes
  • url third-party-advisory
  • url vdb-entry
  • url release-notes
  • url release-notes
  • url release-notes
  • url release-notes
  • url release-notes
  • url release-notes
  • url release-notes
  • url release-notes
  • url release-notes
  • url release-notes
  • url release-notes
  • url release-notes
  • url release-notes
  • url release-notes
  • url release-notes

CVE recientes del mismo producto — Redis

7.5Alta
CVE-2026-66373
Redis Redis

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer, because deleting both consumers via XG…

7.7Alta
CVE-2026-25243

redis-server RESTORE invalid memory access may allow remote code execution

redis redis; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 8

Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that tr…

4.0%EPSS
6.1Media
CVE-2026-23631

redis-server Lua use-after-free may allow remote code execution

redis redis; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or c…

3.1%EPSS
7.7Alta
CVE-2026-23479

redis-server use-after-free in unblock client flow may allow remote code execution

redis redis; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flo…

2.6%EPSS
10.0Crítica
CVE-2025-49844

Redis Lua Use-After-Free may lead to remote code execution

redis redis

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code exe…

83%EPSS