目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

Redis 厂商漏洞列表 / CVE 中文分析 49

Redis 厂商相关 49 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Redis 是一款开源的高性能键值存储数据库，广泛用于缓存、消息队列及实时数据分析。其历史漏洞多涉及远程代码执行、拒绝服务及越权访问，常因配置不当或反序列化缺陷引发。值得关注的是，Redis 4.0 后引入 ACL 权限控制以增强访问安全，但早期版本因默认无认证机制曾暴露大量风险。截至最新统计，已收录 49 条 CVE，建议用户及时升级并严格配置网络策略以防范潜在威胁。

件 47 件の結果 / 49フィルターをクリア
上位製品 Redis: redis hiredis go-redis
CVE IDタイトルCVSS深刻度公開日
CVE-2026-25243 redis-server RESTORE invalid memory access may allow remote code execution — redisCWE-122 8.8 -2026-05-05
CVE-2026-23631 redis-server Lua use-after-free may allow remote code execution — redisCWE-416 8.8 -2026-05-05
CVE-2026-23479 redis-server use-after-free in unblock client flow may allow remote code execution — redisCWE-416 8.8 -2026-05-05
CVE-2025-62507 Redis: Bug in XACKDEL may lead to stack overflow and potential RCE — redisCWE-20 8.8AIHighAI2025-11-04
CVE-2025-49844 Redis Lua Use-After-Free may lead to remote code execution — redisCWE-416 10.0 Critical2025-10-03
CVE-2025-46819 Redis is vulnerable to DoS via specially crafted LUA scripts — redisCWE-190 6.3 Medium2025-10-03
CVE-2025-46818 Redis: Authenticated users can execute LUA scripts as a different user — redisCWE-94 6.0 Medium2025-10-03
CVE-2025-46817 Lua library commands may lead to integer overflow and potential RCE — redisCWE-190 7.0 High2025-10-03
CVE-2025-46686 Redis 安全漏洞 — RedisCWE-401 3.5 Low2025-07-23
CVE-2025-48367 Redis DoS Vulnerability due to bad connection error handling — redisCWE-770 7.5 High2025-07-07
CVE-2025-32023 Redis allows out of bounds writes in hyperloglog commands leading to RCE — redisCWE-680 7.0 High2025-07-07
CVE-2025-27151 redis-check-aof may lead to stack overflow and potential RCE — redisCWE-20 4.7 Medium2025-05-29
CVE-2025-21605 Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client — redisCWE-770 7.5 High2025-04-23
CVE-2024-51741 Redis allows denial-of-service due to malformed ACL selectors — redisCWE-20 4.4 Medium2025-01-06
CVE-2024-46981 Redis' Lua library commands may lead to remote code execution — redisCWE-416 7.0 High2025-01-06
CVE-2024-31449 Lua library commands may lead to stack overflow and RCE in Redis — redisCWE-20 7.0 High2024-10-07
CVE-2024-31228 Denial-of-service due to unbounded pattern matching in Redis — redisCWE-674 5.5 Medium2024-10-07
CVE-2024-31227 Denial-of-service due to malformed ACL selectors in Redis — redisCWE-20 4.4 Medium2024-10-07
CVE-2023-41056 Redis vulnerable to integer overflow in certain payloads — redisCWE-762 8.1 High2024-01-10
CVE-2023-45145 Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window. — redisCWE-668 3.6 Low2023-10-18
CVE-2023-41053 Redis SORT_RO may bypass ACL configuration — redisCWE-269 3.3 Low2023-09-06
CVE-2022-24834 Heap overflow issue with the Lua cjson library used by Redis — redisCWE-122 7.0 High2023-07-13
CVE-2023-36824 Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis — redisCWE-122 7.4 High2023-07-11
CVE-2023-28856 `HINCRBYFLOAT` can be used to crash a redis-server process — redisCWE-617 5.5 Medium2023-04-18
CVE-2023-28425 Specially crafted MSETNX command can lead to denial-of-service — redisCWE-77 5.5 Medium2023-03-20
CVE-2023-25155 Integer Overflow in several Redis commands can lead to denial of service. — redisCWE-190 5.5 Medium2023-03-02
CVE-2022-36021 Redis string pattern matching can be abused to achieve Denial of Service — redisCWE-407 5.5 Medium2023-03-01
CVE-2022-35977 Integer overflow in certain command arguments can drive Redis to OOM panic — redisCWE-190 5.5 Medium2023-01-20
CVE-2023-22458 Integer overflow in multiple Redis commands can lead to denial-of-service — redisCWE-190 5.5 Medium2023-01-20
CVE-2022-35951 Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow — redisCWE-190 7.0 High2022-09-23

本页汇总了 Redis 厂商截至目前公开的全部 49 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。