Description
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Redis Redis
Default version status: unknown
8.2.9unaffected8.4.6unaffected8.6.6unaffected8.8.2unaffected8.10.1unaffected7.4.11unaffected6.2.24unaffected7.2.16unaffected0 to < 8.8.2affected0 to < 8.2.9affected0 to < 8.4.6affected0 to < 8.6.6affected0 to < 8.10.1affected0 to < 7.4.11affected0 to < 6.2.24affected0 to < 7.2.16affected
Redis Redis Software (Enterprise)
Default version status: unknown
8.2.0-46unaffected8.0.20-96unaffected7.22.2-179unaffected7.8.6-303unaffected0 to < 8.2.0-46affected0 to < 8.0.20-96affected0 to < 7.22.2-179affected0 to < 7.8.6-303affected
References
- https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834 ↗
- https://github.com/v12-security/pocs/tree/main/redis/server_ssl ↗
- https://raw.githubusercontent.com/redis/redis/8.2/00-RELEASENOTES ↗
- https://raw.githubusercontent.com/redis/redis/8.4/00-RELEASENOTES ↗
- https://raw.githubusercontent.com/redis/redis/8.6/00-RELEASENOTES ↗
- https://raw.githubusercontent.com/redis/redis/8.8/00-RELEASENOTES ↗
- https://raw.githubusercontent.com/redis/redis/8.10/00-RELEASENOTES ↗
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-239-01.json ↗
- https://www.cve.org/CVERecord?id=CVE-2026-81934 ↗
- https://github.com/redis/redis/releases/tag/6.2.24 ↗
- https://github.com/redis/redis/releases/tag/7.2.16 ↗
- https://github.com/redis/redis/releases/tag/7.4.11 ↗
- https://github.com/redis/redis/releases/tag/8.4.6 ↗
- https://github.com/redis/redis/releases/tag/8.2.9 ↗
- https://github.com/redis/redis/releases/tag/8.6.6 ↗
- https://github.com/redis/redis/releases/tag/8.8.2 ↗
- https://github.com/redis/redis/releases/tag/8.10.1 ↗
- https://redis.io/docs/latest/operate/rs/release-notes/rs-8-2-releases/rs-8-2-0-46/ ↗
- https://redis.io/docs/latest/operate/rs/release-notes/rs-8-0-releases/rs-8-0-20-96/ ↗
- https://redis.io/docs/latest/operate/rs/release-notes/rs-7-22-releases/rs-7-22-2-179/ ↗
- https://redis.io/docs/latest/operate/rs/release-notes/rs-7-8-releases/rs-7-8-6-303/ ↗
- https://raw.githubusercontent.com/redis/redis/7.4/00-RELEASENOTES ↗
- https://raw.githubusercontent.com/redis/redis/7.2/00-RELEASENOTES ↗
- https://raw.githubusercontent.com/redis/redis/6.2/00-RELEASENOTES ↗