title: Red Hat Security Advisory: redis:6 security update
description: redis: heap overflow in the lua cjson and cmsgpack libraries redis: Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands may result with false OOM panic redis: Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow redis: Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands may lead to denial-of-service redis: String matching commands (like SCAN or KEYS) with a specially crafted pattern to trigger a denial-of-service attack redis: Insufficient validation of HINCRBYFLOAT command redis: possible bypass of Unix socket permissions on startup redis: Denial-of-service due to unbounded pattern matching in Redis redis: Lua library commands may lead to stack overflow and RCE in Redis redis: Redis' Lua library commands may lead to remote code execution
cpes: cpe:/a:redhat:enterprise_linux:8::appstream