Description (CNA)
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 9080020260821173335.9 before * |
| Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | unaffected 9040020260917140622.9 before * |
| Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support | unaffected 9060020260917140656.9 before * |
| Red Hat / Pen Drive Powered by Red Hat Lightspeed | affected |
| Red Hat / Red Hat 3scale API Management Platform 2 | unaffected |
| Red Hat / Red Hat 3scale API Management Platform 2 | unaffected |
| Red Hat / Red Hat 3scale API Management Platform 2 | unaffected |
| Red Hat / Red Hat Enterprise Linux 10 | affected |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected |
| Red Hat / Red Hat Hardened Images | affected |
CWE
CWE-125
References
- https://access.redhat.com/errata/RHSA-2026:65120
- https://access.redhat.com/errata/RHSA-2026:69520
- https://access.redhat.com/errata/RHSA-2026:69521
- https://access.redhat.com/security/cve/CVE-2026-92925
- https://bugzilla.redhat.com/show_bug.cgi?id=2535971
- https://github.com/redis/redis/commit/37894faeea11e2db28b9fc2af378a762d2c36523
- https://github.com/redis/redis/pull/15263
- https://github.com/redis/redis/releases/tag/8.10.0
ADP enrichment
No English description supplied.
No references supplied.