Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Redis Server on Red Hat Systems Can Be Hacked Remotely

published 1 year ago

Summary

A security update is available for the Redis server running on Red Hat systems. This update fixes a vulnerability that could be exploited by an attacker to gain unauthorized access to the system. To protect your system, apply the update as soon as possible.

What to do

Update redhat redis to version 0:6.2.19-1.module+el8.10.0+23330+19e91c41.
Update redhat redis-debuginfo to version 0:6.2.19-1.module+el8.10.0+23330+19e91c41.
Update redhat redis-debugsource to version 0:6.2.19-1.module+el8.10.0+23330+19e91c41.
Update redhat redis-devel to version 0:6.2.19-1.module+el8.10.0+23330+19e91c41.
Update redhat redis-doc to version 0:6.2.19-1.module+el8.10.0+23330+19e91c41.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:8::appstream	redhat	redis	< 0:6.2.19-1.module+el8.10.0+23330+19e91c41 Fix: upgrade to 0:6.2.19-1.module+el8.10.0+23330+19e91c41
Red Hat:enterprise_linux:8::appstream	redhat	redis-debuginfo	< 0:6.2.19-1.module+el8.10.0+23330+19e91c41 Fix: upgrade to 0:6.2.19-1.module+el8.10.0+23330+19e91c41
Red Hat:enterprise_linux:8::appstream	redhat	redis-debugsource	< 0:6.2.19-1.module+el8.10.0+23330+19e91c41 Fix: upgrade to 0:6.2.19-1.module+el8.10.0+23330+19e91c41
Red Hat:enterprise_linux:8::appstream	redhat	redis-devel	< 0:6.2.19-1.module+el8.10.0+23330+19e91c41 Fix: upgrade to 0:6.2.19-1.module+el8.10.0+23330+19e91c41
Red Hat:enterprise_linux:8::appstream	redhat	redis-doc	< 0:6.2.19-1.module+el8.10.0+23330+19e91c41 Fix: upgrade to 0:6.2.19-1.module+el8.10.0+23330+19e91c41

Original advisory text

Red Hat Security Advisory: redis:6 security update

References

https://access.redhat.com/errata/RHSA-2025:12006 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2376857 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2376858 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12006.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-32023 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-32023 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-32023 Vendor Advisory
https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445 Third Party Advisory
https://github.com/redis/redis/releases/tag/6.2.19 Third Party Advisory
https://github.com/redis/redis/releases/tag/7.2.10 Third Party Advisory
https://github.com/redis/redis/releases/tag/7.4.5 Third Party Advisory
https://github.com/redis/redis/releases/tag/8.0.3 Third Party Advisory
https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-48367 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-48367 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-48367 Vendor Advisory
https://github.com/redis/redis/commit/bde62951accfc4bb0a516276fd0b4b307e140ce2 Third Party Advisory
https://github.com/redis/redis/security/advisories/GHSA-4q32-c38c-pwgq Third Party Advisory
https://github.com/valkey-io/valkey/releases Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published29 Jul 2025

Updated21 Mar 2026

First seen21 Mar 2026

Sources

RHSA-2025:12006 · OSV

Track software like this

Free during beta