Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-32023

Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing hyperloglog operations. This can be done using ACL to restrict HLL commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.0%
CVSS Severity
CVSS v3 Score 7.0
Products affected by CVE-2025-32023
  • Redis » Redis » Version: 2.8.0
    cpe:2.3:a:redis:redis:2.8.0
  • Redis » Redis » Version: 2.8.1
    cpe:2.3:a:redis:redis:2.8.1
  • Redis » Redis » Version: 2.8.10
    cpe:2.3:a:redis:redis:2.8.10
  • Redis » Redis » Version: 2.8.11
    cpe:2.3:a:redis:redis:2.8.11
  • Redis » Redis » Version: 2.8.12
    cpe:2.3:a:redis:redis:2.8.12
  • Redis » Redis » Version: 2.8.13
    cpe:2.3:a:redis:redis:2.8.13
  • Redis » Redis » Version: 2.8.14
    cpe:2.3:a:redis:redis:2.8.14
  • Redis » Redis » Version: 2.8.15
    cpe:2.3:a:redis:redis:2.8.15
  • Redis » Redis » Version: 2.8.16
    cpe:2.3:a:redis:redis:2.8.16
  • Redis » Redis » Version: 2.8.17
    cpe:2.3:a:redis:redis:2.8.17
  • Redis » Redis » Version: 2.8.18
    cpe:2.3:a:redis:redis:2.8.18
  • Redis » Redis » Version: 2.8.19
    cpe:2.3:a:redis:redis:2.8.19
  • Redis » Redis » Version: 2.8.2
    cpe:2.3:a:redis:redis:2.8.2
  • Redis » Redis » Version: 2.8.20
    cpe:2.3:a:redis:redis:2.8.20
  • Redis » Redis » Version: 2.8.21
    cpe:2.3:a:redis:redis:2.8.21
  • Redis » Redis » Version: 2.8.22
    cpe:2.3:a:redis:redis:2.8.22
  • Redis » Redis » Version: 2.8.23
    cpe:2.3:a:redis:redis:2.8.23
  • Redis » Redis » Version: 2.8.24
    cpe:2.3:a:redis:redis:2.8.24
  • Redis » Redis » Version: 2.8.3
    cpe:2.3:a:redis:redis:2.8.3
  • Redis » Redis » Version: 2.8.4
    cpe:2.3:a:redis:redis:2.8.4
  • Redis » Redis » Version: 2.8.5
    cpe:2.3:a:redis:redis:2.8.5
  • Redis » Redis » Version: 2.8.6
    cpe:2.3:a:redis:redis:2.8.6
  • Redis » Redis » Version: 2.8.7
    cpe:2.3:a:redis:redis:2.8.7
  • Redis » Redis » Version: 2.8.8
    cpe:2.3:a:redis:redis:2.8.8
  • Redis » Redis » Version: 2.8.9
    cpe:2.3:a:redis:redis:2.8.9
  • Redis » Redis » Version: 3.0.0
    cpe:2.3:a:redis:redis:3.0.0
  • Redis » Redis » Version: 3.0.1
    cpe:2.3:a:redis:redis:3.0.1
  • Redis » Redis » Version: 3.0.2
    cpe:2.3:a:redis:redis:3.0.2
  • Redis » Redis » Version: 3.0.3
    cpe:2.3:a:redis:redis:3.0.3
  • Redis » Redis » Version: 3.0.4
    cpe:2.3:a:redis:redis:3.0.4
  • Redis » Redis » Version: 3.0.5
    cpe:2.3:a:redis:redis:3.0.5
  • Redis » Redis » Version: 3.0.6
    cpe:2.3:a:redis:redis:3.0.6
  • Redis » Redis » Version: 3.0.7
    cpe:2.3:a:redis:redis:3.0.7
  • Redis » Redis » Version: 3.2.0
    cpe:2.3:a:redis:redis:3.2.0
  • Redis » Redis » Version: 3.2.1
    cpe:2.3:a:redis:redis:3.2.1
  • Redis » Redis » Version: 3.2.10
    cpe:2.3:a:redis:redis:3.2.10
  • Redis » Redis » Version: 3.2.11
    cpe:2.3:a:redis:redis:3.2.11
  • Redis » Redis » Version: 3.2.12
    cpe:2.3:a:redis:redis:3.2.12
  • Redis » Redis » Version: 3.2.13
    cpe:2.3:a:redis:redis:3.2.13
  • Redis » Redis » Version: 3.2.2
    cpe:2.3:a:redis:redis:3.2.2
  • Redis » Redis » Version: 3.2.3
    cpe:2.3:a:redis:redis:3.2.3
  • Redis » Redis » Version: 3.2.4
    cpe:2.3:a:redis:redis:3.2.4
  • Redis » Redis » Version: 3.2.5
    cpe:2.3:a:redis:redis:3.2.5
  • Redis » Redis » Version: 3.2.6
    cpe:2.3:a:redis:redis:3.2.6
  • Redis » Redis » Version: 3.2.7
    cpe:2.3:a:redis:redis:3.2.7
  • Redis » Redis » Version: 3.2.8
    cpe:2.3:a:redis:redis:3.2.8
  • Redis » Redis » Version: 3.2.9
    cpe:2.3:a:redis:redis:3.2.9
  • Redis » Redis » Version: 4.0.0
    cpe:2.3:a:redis:redis:4.0.0
  • Redis » Redis » Version: 4.0.1
    cpe:2.3:a:redis:redis:4.0.1
  • Redis » Redis » Version: 4.0.10
    cpe:2.3:a:redis:redis:4.0.10
  • Redis » Redis » Version: 4.0.11
    cpe:2.3:a:redis:redis:4.0.11
  • Redis » Redis » Version: 4.0.12
    cpe:2.3:a:redis:redis:4.0.12
  • Redis » Redis » Version: 4.0.13
    cpe:2.3:a:redis:redis:4.0.13
  • Redis » Redis » Version: 4.0.14
    cpe:2.3:a:redis:redis:4.0.14
  • Redis » Redis » Version: 4.0.2
    cpe:2.3:a:redis:redis:4.0.2
  • Redis » Redis » Version: 4.0.3
    cpe:2.3:a:redis:redis:4.0.3
  • Redis » Redis » Version: 4.0.4
    cpe:2.3:a:redis:redis:4.0.4
  • Redis » Redis » Version: 4.0.5
    cpe:2.3:a:redis:redis:4.0.5
  • Redis » Redis » Version: 4.0.6
    cpe:2.3:a:redis:redis:4.0.6
  • Redis » Redis » Version: 4.0.7
    cpe:2.3:a:redis:redis:4.0.7
  • Redis » Redis » Version: 4.0.8
    cpe:2.3:a:redis:redis:4.0.8
  • Redis » Redis » Version: 4.0.9
    cpe:2.3:a:redis:redis:4.0.9
  • Redis » Redis » Version: 5.0.0
    cpe:2.3:a:redis:redis:5.0.0
  • Redis » Redis » Version: 5.0.1
    cpe:2.3:a:redis:redis:5.0.1
  • Redis » Redis » Version: 5.0.10
    cpe:2.3:a:redis:redis:5.0.10
  • Redis » Redis » Version: 5.0.11
    cpe:2.3:a:redis:redis:5.0.11
  • Redis » Redis » Version: 5.0.12
    cpe:2.3:a:redis:redis:5.0.12
  • Redis » Redis » Version: 5.0.13
    cpe:2.3:a:redis:redis:5.0.13
  • Redis » Redis » Version: 5.0.14
    cpe:2.3:a:redis:redis:5.0.14
  • Redis » Redis » Version: 5.0.2
    cpe:2.3:a:redis:redis:5.0.2
  • Redis » Redis » Version: 5.0.3
    cpe:2.3:a:redis:redis:5.0.3
  • Redis » Redis » Version: 5.0.4
    cpe:2.3:a:redis:redis:5.0.4
  • Redis » Redis » Version: 5.0.5
    cpe:2.3:a:redis:redis:5.0.5
  • Redis » Redis » Version: 5.0.6
    cpe:2.3:a:redis:redis:5.0.6
  • Redis » Redis » Version: 5.0.7
    cpe:2.3:a:redis:redis:5.0.7
  • Redis » Redis » Version: 5.0.8
    cpe:2.3:a:redis:redis:5.0.8
  • Redis » Redis » Version: 5.0.9
    cpe:2.3:a:redis:redis:5.0.9
  • Redis » Redis » Version: 6.0.0
    cpe:2.3:a:redis:redis:6.0.0
  • Redis » Redis » Version: 6.0.1
    cpe:2.3:a:redis:redis:6.0.1
  • Redis » Redis » Version: 6.0.10
    cpe:2.3:a:redis:redis:6.0.10
  • Redis » Redis » Version: 6.0.11
    cpe:2.3:a:redis:redis:6.0.11
  • Redis » Redis » Version: 6.0.12
    cpe:2.3:a:redis:redis:6.0.12
  • Redis » Redis » Version: 6.0.13
    cpe:2.3:a:redis:redis:6.0.13
  • Redis » Redis » Version: 6.0.14
    cpe:2.3:a:redis:redis:6.0.14
  • Redis » Redis » Version: 6.0.15
    cpe:2.3:a:redis:redis:6.0.15
  • Redis » Redis » Version: 6.0.16
    cpe:2.3:a:redis:redis:6.0.16
  • Redis » Redis » Version: 6.0.17
    cpe:2.3:a:redis:redis:6.0.17
  • Redis » Redis » Version: 6.0.19
    cpe:2.3:a:redis:redis:6.0.19
  • Redis » Redis » Version: 6.0.2
    cpe:2.3:a:redis:redis:6.0.2
  • Redis » Redis » Version: 6.0.3
    cpe:2.3:a:redis:redis:6.0.3
  • Redis » Redis » Version: 6.0.4
    cpe:2.3:a:redis:redis:6.0.4
  • Redis » Redis » Version: 6.0.5
    cpe:2.3:a:redis:redis:6.0.5
  • Redis » Redis » Version: 6.0.6
    cpe:2.3:a:redis:redis:6.0.6
  • Redis » Redis » Version: 6.0.7
    cpe:2.3:a:redis:redis:6.0.7
  • Redis » Redis » Version: 6.0.8
    cpe:2.3:a:redis:redis:6.0.8
  • Redis » Redis » Version: 6.0.9
    cpe:2.3:a:redis:redis:6.0.9
  • Redis » Redis » Version: 6.2.0
    cpe:2.3:a:redis:redis:6.2.0
  • Redis » Redis » Version: 6.2.1
    cpe:2.3:a:redis:redis:6.2.1
  • Redis » Redis » Version: 6.2.10
    cpe:2.3:a:redis:redis:6.2.10
  • Redis » Redis » Version: 6.2.11
    cpe:2.3:a:redis:redis:6.2.11
  • Redis » Redis » Version: 6.2.12
    cpe:2.3:a:redis:redis:6.2.12
  • Redis » Redis » Version: 6.2.13
    cpe:2.3:a:redis:redis:6.2.13
  • Redis » Redis » Version: 6.2.14
    cpe:2.3:a:redis:redis:6.2.14
  • Redis » Redis » Version: 6.2.16
    cpe:2.3:a:redis:redis:6.2.16
  • Redis » Redis » Version: 6.2.17
    cpe:2.3:a:redis:redis:6.2.17
  • Redis » Redis » Version: 6.2.18
    cpe:2.3:a:redis:redis:6.2.18
  • Redis » Redis » Version: 6.2.2
    cpe:2.3:a:redis:redis:6.2.2
  • Redis » Redis » Version: 6.2.3
    cpe:2.3:a:redis:redis:6.2.3
  • Redis » Redis » Version: 6.2.4
    cpe:2.3:a:redis:redis:6.2.4
  • Redis » Redis » Version: 6.2.5
    cpe:2.3:a:redis:redis:6.2.5
  • Redis » Redis » Version: 6.2.6
    cpe:2.3:a:redis:redis:6.2.6
  • Redis » Redis » Version: 6.2.7
    cpe:2.3:a:redis:redis:6.2.7
  • Redis » Redis » Version: 6.2.8
    cpe:2.3:a:redis:redis:6.2.8
  • Redis » Redis » Version: 6.2.9
    cpe:2.3:a:redis:redis:6.2.9
  • Redis » Redis » Version: 7.2.0
    cpe:2.3:a:redis:redis:7.2.0
  • Redis » Redis » Version: 7.2.1
    cpe:2.3:a:redis:redis:7.2.1
  • Redis » Redis » Version: 7.2.2
    cpe:2.3:a:redis:redis:7.2.2
  • Redis » Redis » Version: 7.2.3
    cpe:2.3:a:redis:redis:7.2.3
  • Redis » Redis » Version: 7.2.4
    cpe:2.3:a:redis:redis:7.2.4
  • Redis » Redis » Version: 7.2.5
    cpe:2.3:a:redis:redis:7.2.5
  • Redis » Redis » Version: 7.2.6
    cpe:2.3:a:redis:redis:7.2.6
  • Redis » Redis » Version: 7.2.7
    cpe:2.3:a:redis:redis:7.2.7
  • Redis » Redis » Version: 7.2.8
    cpe:2.3:a:redis:redis:7.2.8
  • Redis » Redis » Version: 7.2.9
    cpe:2.3:a:redis:redis:7.2.9
  • Redis » Redis » Version: 7.4.0
    cpe:2.3:a:redis:redis:7.4.0
  • Redis » Redis » Version: 7.4.1
    cpe:2.3:a:redis:redis:7.4.1
  • Redis » Redis » Version: 7.4.2
    cpe:2.3:a:redis:redis:7.4.2
  • Redis » Redis » Version: 7.4.3
    cpe:2.3:a:redis:redis:7.4.3
  • Redis » Redis » Version: 7.4.4
    cpe:2.3:a:redis:redis:7.4.4
  • Redis » Redis » Version: 8.0.0
    cpe:2.3:a:redis:redis:8.0.0
  • Redis » Redis » Version: 8.0.1
    cpe:2.3:a:redis:redis:8.0.1
  • Redis » Redis » Version: 8.0.2
    cpe:2.3:a:redis:redis:8.0.2


Contact Us

Shodan ® - All rights reserved