lfprojects valkey güvenlik açıkları (CVE)

lfprojects valkey için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

5 sonuç
7.5Yüksek
CVE-2026-27623

Valkey has Pre-Authentication DOS from malformed RESP request

valkey-io valkey; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 9

Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the system to abort by triggering an assertion. When processing incoming requests, the Valkey system do…

7.5Yüksek
CVE-2026-21863

Malformed Valkey Cluster bus message can lead to Remote DoS

valkey-io valkey; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with access to the Valkey clusterbus port can send an invalid packet that may cause an out bound read, which might result in the system crashing. …

8.5Yüksek
CVE-2025-67733

Valkey Affected by RESP Protocol Injection via Lua error_reply

valkey-io valkey; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampe…

10.0Kritik
CVE-2025-49844

Redis Lua Use-After-Free may lead to remote code execution

redis redis

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code exe…

83%EPSS