Skip to content
fr Sign in
7.1 High

CVE-2026-92925 Redis: redis: out-of-bounds read via crafted cluster bus packets

Description

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).

CVSS 3.1 detail

Vector CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Exploitable from the adjacent network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Adjacent network
Attack complexity
Low
Privileges required
None
Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
High

Affected products and versions

Product Affected versions Fixed in
Redis Open Source 8.10 earliest → < 8.10.0 8.10.0
Redis Open Source 7.0 7.0.0 → 8.8.1 No fix stated
Confidential Compute Attestation Versions not published
Logging Subsystem for Red Hat OpenShift Versions not published
Pen Drive Powered by Red Hat Lightspeed Versions not published
Red Hat 3scale API Management Platform 2 Versions not published
Red Hat AI Inference Server Versions not published
Red Hat Ansible Automation Platform 2 Versions not published
Red Hat Connectivity Link 1 Versions not published
Show the 17 other branches
Product Affected versions Fixed in
Red Hat Developer Hub Versions not published
Red Hat Enterprise Linux AI (RHEL AI) 3 Versions not published
Red Hat OpenShift AI (RHOAI) Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat OpenShift Update Service Versions not published
Red Hat OpenStack Platform 16.2 Versions not published
Red Hat OpenStack Platform 17.1 Versions not published
Red Hat OpenStack Platform 18.0 Versions not published
Red Hat Quay 3 Versions not published
Red Hat Satellite 6 Versions not published
Red Hat Update Infrastructure 5 Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat Hardened Images Versions not published
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 9040020260917140622.9 earliest → < 9040020260917140622.9 9040020260917140622.9
Red Hat Enterprise Linux 9.6 Extended Update Support 9060020260917140656.9 earliest → < 9060020260917140656.9 9060020260917140656.9

References

Timeline

  1. Published
  2. Last modified
Track this CVE