VULNERABILITY INTELLIGENCE
CVE-2021-32672
CVSS score5.3 MEDIUM
EPSS probability1.68%
CISA KEVNot currently listed
Published2021-10-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support (3.2 or newer). The problem is fixed in versions 6.2.6, 6.0.16 and 5.0.14.
Weakness classification
- security-advisories@github.com: CWE-125
- nvd@nist.gov: CWE-125
Primary references
- security-advisories@github.com — Patch, Third Party Advisory
- security-advisories@github.com — Third Party Advisory
- security-advisories@github.com
- security-advisories@github.com
- security-advisories@github.com
- security-advisories@github.com — Third Party Advisory
- security-advisories@github.com — Third Party Advisory
- security-advisories@github.com — Third Party Advisory
- security-advisories@github.com — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108