Servers and applications
CVE-2021-32687
Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can be exploited to corrupt the heap and potentially be used to leak arbitrary contents of the heap or trigger remote code execution. The vulnerability involves changing the default set-max-intset-entries configuration parameter to a very large value and constructing…
- Severity
- High 7.5
- Published
- 4 Oct 2021
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 5.0.14, 6.0.16, 6.2.6
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
RedisServers and applications · cpe:a:redis:redis |
|