RE
Database
Redis
On CISA KEVExploited in the wild
71
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 10High 41Medium 15Low 4
Watch
Add Redis to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-46819 | 7.1 | Oct 3 | Redis is an open source, in-memory database that persists on disk Affected: before 6.2.20; 7.0 before 7.2.11; 7.4.0 before 7.4.6; 8.0.0 before 8.0.4; 8.2.0 before 8.2.2 |
| CVE-2024-31228 | 6.5 | Oct 7 | Redis is an open source, in-memory database that persists on disk Affected: 2.2.5 before 6.2.16; 7.2.0 before 7.2.6; 7.4.0; 7.4.0; 7.4.0 |
| CVE-2023-28856 | 6.5 | Apr 18 | Redis is an open source, in-memory database that persists on disk Affected: before 6.0.19; 6.2.0 before 6.2.12; 7.0.0 before 7.0.11 |
| CVE-2023-25155 | 6.5 | Mar 2 | Redis is an in-memory database that persists on disk Affected: before 6.0.18; 6.2.0 before 6.2.11; 7.0.0 before 7.0.9 |
| CVE-2021-31294 | 5.9 | Jul 15 | Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command) Affected: before 6.2.0 |
| CVE-2023-28425 | 5.5 | Mar 20 | Redis is an in-memory database that persists on disk Affected: 7.0.8 before 7.0.10 |
| CVE-2022-36021 | 5.5 | Mar 1 | Redis is an in-memory database that persists on disk Affected: before 6.0.18; 6.2.0 before 6.2.11; 7.0.0 before 7.0.9 |
| CVE-2023-22458 | 5.5 | Jan 20 | Redis is an in-memory database that persists on disk Affected: 6.2.0 before 6.2.9; 7.0.0 before 7.0.8 |
| CVE-2022-35977 | 5.5 | Jan 20 | Redis is an in-memory database that persists on disk Affected: 6.0.0 before 6.0.17; 6.2.0 before 6.2.9; 7.0.0 before 7.0.8 |
| CVE-2022-24736 | 5.5 | Apr 27 | Redis is an in-memory database that persists on disk Affected: before 6.2.7; 7.0; 7.0; 7.0 |
| CVE-2013-0180 | 5.5 | Nov 1 | Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds Affected: 2.6.0 |
| CVE-2013-0178 | 5.5 | Nov 1 | Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm Affected: before 2.6.0 |
| CVE-2021-3470 | 5.3 | Mar 31 | A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to… Affected: before 5.0.10; 6.0.0 before 6.0.9; 6.2.0; 6.2.0; 6.2.0 |
| CVE-2024-51741 | 4.4 | Jan 6 | Redis allows denial-of-service due to malformed ACL selectors Affected: >= 7.0.0, < 7.2.7; >= 7.4.0, < 7.4.2 |
| CVE-2024-31227 | 4.4 | Oct 7 | Redis is an open source, in-memory database that persists on disk Affected: 7.0.0 before 7.2.6; 7.4.0 |
| CVE-2021-32672 | 4.3 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: 3.2.0 before 5.0.14; 6.0.0 before 6.0.16; 6.2.0 before 6.2.6 |
| CVE-2023-45145 | 3.6 | Oct 18 | Redis is an in-memory database that persists on disk Affected: 2.6.0 before 6.2.14; 7.0.0 before 7.0.14; 7.2.0 before 7.2.2; 2.6.0 |
| CVE-2023-41053 | 3.3 | Sep 6 | Redis is an in-memory database that persists on disk Affected: 7.0 before 7.0.13; 7.2.0; 7.2.0; 7.2.0; 7.2.0 |
| CVE-2022-3647 | 3.3 | Oct 21 | Redis Crash Report debug.c sigsegvHandler denial of service Affected: 6.2.0; 6.2.1; 6.2.2; 6.2.3; 6.2.4; 6.2.5; +8 more |
| CVE-2013-7458 | 3.3 | Aug 10 | linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file Affected: through 3.2.2 |
| CVE-2015-4335 | – | Jun 9 | Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command Affected: through 2.8.20; 3.0.0; 3.0.1 |