redis7 (SUSE:Linux Enterprise Module for Server Applications 15 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Server Applications 15 SP5 package redis7, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (11)

• CVE-2023-36824 — CVSS 7.4 (high): Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of…
• CVE-2024-31449 — CVSS 7.0 (high): Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger…
• CVE-2022-24834 — CVSS 7.0 (high): Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the…
• CVE-2023-28425 — CVSS 5.5 (medium): Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use…
• CVE-2023-28856 — CVSS 5.5 (medium): Redis is an open source, in-memory database that persists on disk. Authenticated users can use the `HINCRBYFLOAT` command to create an…
• CVE-2022-36021 — CVSS 5.5 (medium): Redis is an in-memory database that persists on disk. Authenticated users can use string matching commands (like `SCAN` or `KEYS`) with a…
• CVE-2024-31228 — CVSS 5.5 (medium): Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially…
• CVE-2023-25155 — CVSS 5.5 (medium): Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SRANDMEMBER`, `ZRANDMEMBER`, and…
• CVE-2024-31227 — CVSS 4.4 (medium): Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL…
• CVE-2023-45145 — CVSS 3.6 (low): Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions…
• CVE-2023-41053 — CVSS 3.3 (low): Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may…