The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3946 advisory.

    Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can     contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data     set. You can persist it either by dumping the data set to disk every once in a while, or by appending each     command to a log.

    Security Fix(es):

    * redis: Lua scripts can overflow the heap-based Lua stack (CVE-2021-32626)

    * redis: Integer overflow issue with Streams (CVE-2021-32627)

    * redis: Integer overflow bug in the ziplist data structure (CVE-2021-32628)

    * redis: Denial of service via Redis Standard Protocol (RESP) request (CVE-2021-32675)

    * redis: Integer overflow issue with intsets (CVE-2021-32687)

    * redis: Integer overflow issue with strings (CVE-2021-41099)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3971 advisory.

    Redis is an advanced key-value store.

    Security Fix(es):

    * Lua scripts can overflow the heap-based Lua stack (CVE-2021-32626)

    * Integer overflow issue with Streams (CVE-2021-32627)

    * Integer overflow bug in the ziplist data structure (CVE-2021-32628)

    * Denial of service via Redis Standard Protocol (RESP) request     (CVE-2021-32675)

    * Integer overflow issue with intsets (CVE-2021-32687)

    * Integer overflow issue with strings (CVE-2021-41099)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2497:01 advisory.

    redis: Lua scripts can overflow the heap-based Lua stack (CVE-2021-32626)         redis: Integer overflow issue with Streams (CVE-2021-32627)         redis: Integer overflow bug in the ziplist data structure (CVE-2021-32628)         redis: Denial of service via Redis Standard Protocol (RESP) request (CVE-2021-32675)         redis: Integer overflow issue with intsets (CVE-2021-32687)         redis: Integer overflow issue with strings (CVE-2021-41099)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017741 advisory.

    Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted     Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete     checks for this condition. This can result with heap corruption and potentially remote code execution.
    This problem exists in all versions of Redis with Lua scripting support, starting from 2.6. The problem is     fixed in versions 6.2.6, 6.0.16 and 5.0.14. For users unable to update an additional workaround to     mitigate the problem without patching the redis-server executable is to prevent users from executing Lua     scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
154312	RHEL 8 : redis:5 (RHSA-2021:3946)	Nessus	Red Hat Local Security Checks	2021/10/21	2024/11/7	high
154421	RHEL 7 : Red Hat OpenStack Platform 10.0 (redis) (RHSA-2021:3971)	Nessus	Red Hat Local Security Checks	2021/10/26	2024/11/8	high
294389	MiracleLinux 8 : redis:5 (AXSA:2021-2497:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
313919	Unity Linux 20.1070e Security Update: redis6 (UTSA-2026-017741)	Nessus	Unity Linux Local Security Checks	2026/5/11	2026/5/11	high

检测

插件搜索

high

high

high

high