Update of the Redis DBMS versions 6.2.6, 6.0.16, and 5.0.14 addressing 8 vulnerabilities
Corrective releases of the Redis DBMS 6.2.6, 6.0.16, and 5.0.14 have been published, addressing 8 vulnerabilities. All users are strongly advised to urgently update Redis to the new versions. Four vulnerabilities (CVE-2021-41099, CVE-2021-32687, CVE-2021-32628, CVE-2021-32627) may lead to buffer overflow when processing specially crafted commands and network requests, but exploitation requires specific configuration parameters (proto-max-bulk-len, set-max-intset-entries, hash-max-ziplist-*, proto-max-bulk-len, client-query-buffer-limit) […]
