Exposición de Redis

Databases
79
score de exposición
61.163
sitios usan
1
en explotación
2
críticos
Análisis Vexday

Redis apresenta uma taxa de exploração ativa 4,0 vezes acima da média geral do catálogo CISA KEV, o que, dado o volume total de 56 CVEs catalogadas, indica uma proporção de risco elevada em relação ao tamanho do portfólio de vulnerabilidades. A CVE mais crítica em exploração ativa é a CVE-2022-0543, com score EPSS de 0,9967 — valor próximo ao máximo possível, sinalizando probabilidade altíssima de exploração em ambientes reais. O tipo de falha mais recorrente é CWE-190 (Integer Overflow), que merece atenção em processos de hardening e validação de entradas, especialmente em instâncias expostas em rede. O surgimento de 3 novas CVEs nos últimos 90 dias reforça a necessidade de monitoramento contínuo e aplicação ágil de patches em implantações Redis.

CVEs

58 resultados
CVE-2025-46819MEDIUMRedis is vulnerable to DoS via specially crafted LUA scriptsEPSS 1.1%CVE-2024-31228MEDIUMDenial-of-service due to unbounded pattern matching in RedisEPSS 1.0%CVE-2025-27151MEDIUMredis-check-aof may lead to stack overflow and potential RCEEPSS 1.0%CVE-2023-25155MEDIUMInteger Overflow in several Redis commands can lead to denial of service.EPSS 0.9%CVE-2025-21605HIGHRedis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated clientEPSS 0.9%CVE-2025-46818MEDIUMRedis: Authenticated users can execute LUA scripts as a different userEPSS 0.7%CVE-2022-3734MEDIUMRedis on Windows dbghelp.dll uncontrolled search pathEPSS 0.6%CVE-2022-3647LOWRedis Crash Report debug.c sigsegvHandler denial of serviceEPSS 0.6%CVE-2026-66373HIGHRedis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE paylEPSS 0.6%CVE-2023-45145LOWRedis Unix-domain socket may have be exposed with the wrong permissions for a short time window.EPSS 0.4%CVE-2026-81934HIGHRedis TLS pending-data list use-after-freeEPSS 0.4%CVE-2013-0178Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm.EPSS 0.4%CVE-2016-2121MEDIUMA permissions flaw was found in redis, which sets weak permissions on certain files and directories that could potentially contain sensitiveEPSS 0.4%CVE-2024-31227MEDIUMDenial-of-service due to malformed ACL selectors in RedisEPSS 0.4%CVE-2013-0180Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds.EPSS 0.3%CVE-2024-51741MEDIUMRedis allows denial-of-service due to malformed ACL selectorsEPSS 0.3%CVE-2023-41053LOWRedis SORT_RO may bypass ACL configurationEPSS 0.3%CVE-2025-46686LOWRedis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs beEPSS 0.3%