Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DSA-5001-1:B6416
HistoryNov 05, 2021 - 7:30 p.m.

[SECURITY] [DSA 5001-1] redis security update

2021-11-0519:30:06
lists.debian.org
52
redis
debian
cve-2021-32626
cve-2021-32627
cve-2021-32628
cve-2021-32672
cve-2021-32675
cve-2021-32687
cve-2021-32762
cve-2021-41099
cve-2021-32761
denial of service
arbitrary code

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

Low

EPSS

0.023

Percentile

89.9%

JSON

Debian Security Advisory DSA-5001-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
November 05, 2021 https://www.debian.org/security/faq

Package : redis
CVE ID : CVE-2021-32626 CVE-2021-32627 CVE-2021-32628 CVE-2021-32672
CVE-2021-32675 CVE-2021-32687 CVE-2021-32762 CVE-2021-41099
CVE-2021-32761

Multiple vulnerabilities were discovered in Redis, a persistent key-value
database, which could result in denial of service or the execution of
arbitrary code.

For the oldstable distribution (buster), these problems have been fixed
in version 5:5.0.14-1+deb10u1.

For the stable distribution (bullseye), these problems have been fixed in
version 5:6.0.16-1+deb11u1.

We recommend that you upgrade your redis packages.

For the detailed security status of redis please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/redis

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian10armelredis-tools< 5:5.0.14-1+deb10u1redis-tools_5:5.0.14-1+deb10u1_armel.deb
Debian9amd64redis-server< 3:3.2.6-3+deb9u8redis-server_3:3.2.6-3+deb9u8_amd64.deb
Debian10mipsredis-tools< 5:5.0.14-1+deb10u1redis-tools_5:5.0.14-1+deb10u1_mips.deb
Debian11ppc64elredis-server< 5:6.0.16-1+deb11u1redis-server_5:6.0.16-1+deb11u1_ppc64el.deb
Debian10mipselredis-tools-dbgsym< 5:5.0.14-1+deb10u1redis-tools-dbgsym_5:5.0.14-1+deb10u1_mipsel.deb
Debian10allredis< 5:5.0.14-1+deb10u1redis_5:5.0.14-1+deb10u1_all.deb
Debian11amd64redis-tools-dbgsym< 5:6.0.16-1+deb11u1redis-tools-dbgsym_5:6.0.16-1+deb11u1_amd64.deb
Debian10arm64redis-sentinel< 5:5.0.14-1+deb10u1redis-sentinel_5:5.0.14-1+deb10u1_arm64.deb
Debian11mips64elredis-sentinel< 5:6.0.16-1+deb11u1redis-sentinel_5:6.0.16-1+deb11u1_mips64el.deb
Debian9amd64redis-sentinel< 3:3.2.6-3+deb9u6redis-sentinel_3:3.2.6-3+deb9u6_amd64.deb
Rows per page:
1-10 of 1101

Related

nessus 30
mageia 1
fedora 5
openvas 17
osv 35
freebsd 2
suse 1
ibm 8
ubuntu 1
debian 3
almalinux 2
rocky 2
redhat 9
oraclelinux 2
gentoo 1
photon 2
prion 6
cnvd 1
ubuntucve 5
cve 8
redhatcve 8
cbl_mariner 14
cvelist 8
veracode 6
debiancve 7
nvd 8
alpinelinux 7
nessus
nessus
Debian DSA-5001-1 : redis - security update
2021-11-06 00:00:00
openSUSE 15 Security Update : redis (openSUSE-SU-2021:3772-1)
2021-11-24 00:00:00
FreeBSD : redis -- multiple vulnerabilities (9b4806c1-257f-11ec-9db5-0800270512f4)
2021-10-06 00:00:00
mageia
mageia
Updated redis packages fix security vulnerability
2021-10-21 00:28:32
fedora
fedora
[SECURITY] Fedora 33 Update: redis-6.0.16-1.fc33
2021-10-12 23:47:15
[SECURITY] Fedora 35 Update: redis-6.2.6-1.fc35
2021-10-29 23:18:43
[SECURITY] Fedora 34 Update: redis-6.2.6-1.fc34
2021-10-12 23:45:06
openvas
openvas
Debian: Security Advisory (DSA-5001-1)
2021-11-07 00:00:00
Fedora: Security Advisory for redis (FEDORA-2021-61c487f241)
2021-10-21 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:3772-1)
2021-11-24 00:00:00
osv
osv
redis - security update
2021-11-05 00:00:00
redis-6.2.6-1.1 on GA media
2024-06-15 00:00:00
redis - security update
2021-11-05 00:00:00
freebsd
freebsd
redis -- multiple vulnerabilities
2021-10-04 00:00:00
redis -- Integer overflow issues with BITFIELD command on 32-bit systems
2021-07-04 00:00:00
suse
suse
Security update for redis (important)
2021-11-23 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Redis affecting the IBM Event Streams UI
2021-12-21 17:42:58
Security Bulletin: Mutiple Vulnerabilities in Redis affecting Watson Knowledge Catalog for IBM Cloud Pak for Data
2022-06-22 09:58:56
Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak
2022-10-06 04:10:57
ubuntu
ubuntu
Redis vulnerabilities
2022-08-03 00:00:00
debian
debian
[SECURITY] [DLA 2810-1] redis security update
2021-11-05 11:07:22
[SECURITY] [DLA 2717-1] redis security update
2021-07-22 10:15:38
[SECURITY] [DLA 2717-2] redis security update
2021-08-27 13:43:26
almalinux
almalinux
Important: redis:6 security update
2021-10-20 12:46:40
Important: redis:5 security update
2021-10-19 13:14:11
rocky
rocky
redis:5 security update
2021-10-19 13:14:11
redis:6 security update
2021-10-20 12:46:40
redhat
redhat
(RHSA-2021:3946) Important: redis:5 security update
2021-10-20 12:46:50
(RHSA-2021:3980) Important: Red Hat OpenStack Platform 13.0 (redis) security update
2021-10-25 17:48:44
(RHSA-2021:3944) Important: redis:5 security update
2021-10-20 12:38:31
oraclelinux
oraclelinux
redis:5 security update
2021-10-19 00:00:00
redis:6 security update
2021-10-20 00:00:00
gentoo
gentoo
Redis: Multiple Vulnerabilities
2022-09-29 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2021-3.0-0320
2021-10-28 00:00:00
Moderate Photon OS Security Update - PHSA-2021-0116
2021-10-13 00:00:00
prion
prion
Integer overflow
2021-07-21 21:15:00
Integer overflow
2021-10-04 18:15:00
Design/Logic Flaw
2021-10-04 18:15:00
cnvd
cnvd
Redis remote code execution vulnerability
2021-07-22 00:00:00
ubuntucve
ubuntucve
CVE-2021-32761
2021-07-21 00:00:00
CVE-2021-32687
2021-10-04 00:00:00
CVE-2021-32626
2021-10-04 00:00:00
cve
cve
CVE-2021-32761
2021-07-21 21:15:07
CVE-2021-32687
2021-10-04 18:15:08
CVE-2021-32626
2021-10-04 18:15:08
redhatcve
redhatcve
CVE-2021-32762
2021-10-05 18:01:53
CVE-2021-32628
2021-10-05 18:58:39
CVE-2021-32626
2021-10-05 18:58:38
cbl_mariner
cbl_mariner
CVE-2021-32762 affecting package redis for versions less than 6.2.6-1
2022-04-09 06:51:55
CVE-2021-32761 affecting package redis 5.0.5-7
2021-10-22 04:51:42
CVE-2021-32672 affecting package redis for versions less than 6.2.6-1
2022-04-09 06:51:55
cvelist
cvelist
CVE-2021-32761 Integer overflow issues with *BIT commands on 32-bit systems
2021-07-21 20:50:09
CVE-2021-32628 Vulnerability in handling large ziplists
2021-10-04 17:35:11
CVE-2021-32672 Vulnerability in Lua Debugger in Redis
2021-10-04 17:40:10
veracode
veracode
Remote Code Execution
2021-07-23 23:39:15
Denial Of Service (DoS)
2021-10-05 13:23:45
Remote Code Execution (RCE)
2021-10-05 12:06:07
debiancve
debiancve
CVE-2021-32672
2021-10-04 18:15:08
CVE-2021-32687
2021-10-04 18:15:08
CVE-2021-32627
2021-10-04 18:15:08
nvd
nvd
CVE-2021-32762
2021-10-04 18:15:09
CVE-2021-32675
2021-10-04 18:15:08
CVE-2021-32627
2021-10-04 18:15:08
alpinelinux
alpinelinux
CVE-2021-32687
2021-10-04 18:15:08
CVE-2021-32628
2021-10-04 18:15:08
CVE-2021-32675
2021-10-04 18:15:08

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

Low

EPSS

0.023

Percentile

89.9%

JSON
Related for DEBIAN:DSA-5001-1:B6416
nessus30mageia1fedora5openvas17osv35freebsd2suse1ibm8ubuntu1debian3almalinux2rocky2redhat9oraclelinux2gentoo1photon2prion6cnvd1ubuntucve5cve8redhatcve8cbl_mariner14cvelist8veracode6debiancve7nvd8alpinelinux7