遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2025:0595 公告中提及的多個弱點影響。

    Redis 是一個進階的金鑰值存放區。它通常被稱為資料結構伺服器，因為金鑰可以包含字串、雜湊、清單、集合，以及排序的集合。為提高效能，Redis 會使用記憶體內資料集。每隔一段時間可將資料集傾印到磁碟，或者將每個命令附加到記錄來保留它。

    安全性修正：

    * redis：Redis Redis HRANDFIELD 和 ZRANDMEMBER 命令中的整數溢位弱點可能導致拒絕服務 (CVE-2023-22458)

    * redis：Redis SETRANGE 和 SORT/SORT_RO 命令中的整數溢位弱點可能導致錯誤的 OOM 問題 (CVE-2022-35977)

    * redis：特製的 SRANDMEMBER、ZRANDMEMBER 和 HRANDFIELD 命令可觸發整數溢位 (CVE-2022-36021)

    * redis：包含特製模式的字串比對命令 (如 SCAN 或 KEYS) 可以觸發拒絕服務攻擊 (CVE-2023-25155)

    * redis：HINCRBYFLOAT 命令驗證不足弱點 (CVE-2023-28856)

    * redis：lua cjson 和 cmsgpack 程式庫中的堆積溢位弱點 (CVE-2022-24834)

    * redis：啟動時可能繞過 Unix 通訊端權限 (CVE-2023-45145)

    * redis：Lua 程式庫命令可能導致 Redis 中發生堆疊溢位和 RCE (CVE-2024-31449)

    * redis：Redis 中無限制模式比對引起的拒絕服務 (CVE-2024-31228)

    * redis：Redis 的 Lua 程式庫命令可能導致遠端程式碼執行 (CVE-2024-46981)

    如需安全性問題的詳細資料，包括影響、CVSS 分數、致謝及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

Tenable 已直接從 Red Hat Enterprise Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端主機受到 GLSA-202408-05 中所述的弱點影響 (Redis：多個弱點)

    在 Redis 中發現多個弱點。如需詳細資訊，請檢閱下方提及的 CVE 識別碼。

Tenable 已直接從 Gentoo Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 RockyLinux 8 主機已安裝受到多個弱點影響的套件如 RLSA-2025:0595 公告中所提及。

    * redis：Redis Redis HRANDFIELD 和 ZRANDMEMBER 命令中的整數溢位弱點可能導致拒絕服務 (CVE-2023-22458)

    * redis：Redis SETRANGE 和 SORT/SORT_RO 命令中的整數溢位弱點可能導致錯誤的 OOM 問題 (CVE-2022-35977)

    * redis：特製的 SRANDMEMBER、ZRANDMEMBER 和 HRANDFIELD 命令可觸發整數溢位 (CVE-2022-36021)

    * redis：包含特製模式的字串比對命令 (如 SCAN 或 KEYS) 可以觸發拒絕服務攻擊 (CVE-2023-25155)

    * redis：HINCRBYFLOAT 命令驗證不足弱點 (CVE-2023-28856)

    * redis：lua cjson 和 cmsgpack 程式庫中的堆積溢位弱點 (CVE-2022-24834)

    * redis：啟動時可能繞過 Unix 通訊端權限 (CVE-2023-45145)

    * redis：Lua 程式庫命令可能導致 Redis 中發生堆疊溢位和 RCE (CVE-2024-31449)

    * redis：Redis 中無限制模式比對引起的拒絕服務 (CVE-2024-31228)

    * redis：Redis 的 Lua 程式庫命令可能導致遠端程式碼執行 (CVE-2024-46981)

Tenable 已直接從 RockyLinux 安全性公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-154 advisory.

    Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted     `SETRANGE` and `SORT(_RO)` commands can trigger an integer overflow, resulting with Redis attempting to     allocate impossible amounts of memory and abort with an out-of-memory (OOM) panic. The problem is fixed in     Redis versions 7.0.8, 6.2.9 and 6.0.17. Users are advised to upgrade. There are no known workarounds for     this vulnerability. (CVE-2022-35977)

    Redis is an in-memory database that persists on disk. Authenticated users can use string matching commands     (like `SCAN` or `KEYS`) with a specially crafted pattern to trigger a denial-of-service attack on Redis,     causing it to hang and consume 100% CPU time. The problem is fixed in Redis versions 6.0.18, 6.2.11,     7.0.9. (CVE-2022-36021)

    ** DISPUTED ** A vulnerability, which was classified as problematic, was found in Redis. Affected is the     function sigsegvHandler of the file debug.c of the component Crash Report. The manipulation leads to     denial of service. The real existence of this vulnerability is still doubted at the moment. The name of     the patch is 0bf90d944313919eb8e63d3588bf63a367f020a3. It is recommended to apply a patch to fix this     issue. VDB-211962 is the identifier assigned to this vulnerability. NOTE: The vendor claims that this is     not a DoS because it applies to the crash logging mechanism which is triggered after a crash has occurred.
    (CVE-2022-3647)

    Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted     `SRANDMEMBER`, `ZRANDMEMBER`, and `HRANDFIELD` commands can trigger an integer overflow, resulting in a     runtime assertion and termination of the Redis server process. This problem affects all Redis versions.
    Patches were released in Redis version(s) 6.0.18, 6.2.11 and 7.0.9. (CVE-2023-25155)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:0595 advisory.

    Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can     contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data     set. You can persist it either by dumping the data set to disk every once in a while, or by appending each     command to a log.

    Security Fix(es):

    * redis: Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands may lead to denial-of-service     (CVE-2023-22458)

    * redis: Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands may result with false OOM panic     (CVE-2022-35977)

    * redis: Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer     overflow (CVE-2022-36021)

    * redis: String matching commands (like SCAN or KEYS) with a specially crafted pattern to trigger a     denial-of-service attack (CVE-2023-25155)

    * redis: Insufficient validation of HINCRBYFLOAT command (CVE-2023-28856)

    * redis: heap overflow in the lua cjson and cmsgpack libraries (CVE-2022-24834)

    * redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145)

    * redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449)

    * redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228)

    * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the redis package has been released.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2925-1 advisory.

  - Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis     can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote     code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6,     and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and     6.0.20. (CVE-2022-24834)

  - Redis is an in-memory database that persists on disk. Authenticated users can use string matching commands     (like `SCAN` or `KEYS`) with a specially crafted pattern to trigger a denial-of-service attack on Redis,     causing it to hang and consume 100% CPU time. The problem is fixed in Redis versions 6.0.18, 6.2.11,     7.0.9. (CVE-2022-36021)

  - Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted     `SRANDMEMBER`, `ZRANDMEMBER`, and `HRANDFIELD` commands can trigger an integer overflow, resulting in a     runtime assertion and termination of the Redis server process. This problem affects all Redis versions.
    Patches were released in Redis version(s) 6.0.18, 6.2.11 and 7.0.9. (CVE-2023-25155)

  - Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version     7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of     the Redis server process. The problem is fixed in Redis version 7.0.10. (CVE-2023-28425)

  - Redis is an open source, in-memory database that persists on disk. Authenticated users can use the     `HINCRBYFLOAT` command to create an invalid hash field that will crash Redis on access in affected     versions. This issue has been addressed in in versions 7.0.11, 6.2.12, and 6.0.19. Users are advised to     upgrade. There are no known workarounds for this issue. (CVE-2023-28856)

  - Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names     from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading     random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead     to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and     authenticated users who were set with ACL rules that match key names, executing a specially crafted     command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.
    (CVE-2023-36824)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202408-05 (Redis: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below     for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:0595 advisory.

    * redis: Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands may lead to denial-of-service     (CVE-2023-22458)

    * redis: Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands may result with false OOM panic     (CVE-2022-35977)

    * redis: Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer     overflow (CVE-2022-36021)

    * redis: String matching commands (like SCAN or KEYS) with a specially crafted pattern to trigger a     denial-of-service attack (CVE-2023-25155)

    * redis: Insufficient validation of HINCRBYFLOAT command (CVE-2023-28856)

    * redis: heap overflow in the lua cjson and cmsgpack libraries (CVE-2022-24834)

    * redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145)

    * redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449)

    * redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228)

    * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
232185	RHEL 8：redis:6 (RHSA-2025:0595)	Nessus	Red Hat Local Security Checks	2025/3/6	2025/6/5	high
205117	GLSA-202408-05：Redis：多個弱點	Nessus	Gentoo Local Security Checks	2024/8/7	2024/8/7	high
216290	RockyLinux 8redis:6 (RLSA-2025:0595)	Nessus	Rocky Linux Local Security Checks	2025/2/14	2025/4/14	high
173858	Amazon Linux 2023 : redis6, redis6-devel (ALAS2023-2023-154)	Nessus	Amazon Linux Local Security Checks	2023/4/4	2024/12/17	medium
232185	RHEL 8 : redis:6 (RHSA-2025:0595)	Nessus	Red Hat Local Security Checks	2025/3/6	2025/6/5	high
203743	Photon OS 3.0: Redis PHSA-2023-3.0-0549	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	medium
178690	SUSE SLES15 / openSUSE 15 Security Update : redis7 (SUSE-SU-2023:2925-1)	Nessus	SuSE Local Security Checks	2023/7/21	2023/7/21	high
205117	GLSA-202408-05 : Redis: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2024/8/7	2024/8/7	high
216290	RockyLinux 8 : redis:6 (RLSA-2025:0595)	Nessus	Rocky Linux Local Security Checks	2025/2/14	2025/4/14	high

偵測

搜尋 Plugin

high

high

high

medium

high

medium

high

high

high