CVE catalog

CVE-2021-32761

redis: CVE-2021-32761

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
30.10% · Oct 25, 2026

Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with version 2.2 and prior to versions 5.0.13, 6.0.15, and 6.2.5. On 32-bit systems, Redis `*BIT*` command are vulnerable to integer overflow that can potentially be exploited to corrupt the heap, leak arbitrary heap contents or trigger remote code execution. The vulnerability involves changing the default `proto-max-bulk-len` configuration parameter to a very large value and constructing specially crafted commands bit commands. This problem only affects Redis on 32-bit platforms, or compiled as a 32-bit binary. Redis versions 5.0.`3m 6.0.15, and 6.2.5 contain patches for this issue. An additional workaround to mitigate the problem without patching the `redis-server` executable is to prevent users from modifying the `proto-max-bulk-len` configuration parameter. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianredissid5:8.0.6-3fixed
Debianredisforky5:8.0.6-3fixed
Debianredistrixie5:8.0.2-3+deb13u2fixed
Debianredistrixie-security5:8.0.2-3+deb13u3fixed
Debianredisbookworm5:7.0.15-1~deb12u7fixed
Debianredisbookworm-security5:7.0.15-1~deb12u10fixed
Alpineredis3.115.0.13-r0fixed
Alpineredis3.125.0.13-r0fixed
Alpineredis3.136.0.13-r0fixed
Alpineredis3.146.2.5-r0fixed
Alpineredis3.156.2.5-r0fixed
Alpineredis3.166.2.5-r0fixed
Alpineredis3.176.2.5-r0fixed
Alpineredis3.186.2.5-r0fixed
Alpineredis3.196.2.5-r0fixed
Ubunturedispro4:4.0.1-7vulnerable
Ubunturedispro4:4.0.2-6vulnerable
Ubunturedispro4:4.0.2-9vulnerable
Ubunturedispro5:4.0.5-1vulnerable
Ubunturedispro5:4.0.6-1vulnerable
Ubunturedispro5:4.0.6-2vulnerable
Ubunturedispro5:4.0.7-1vulnerable
Ubunturedispro5:4.0.8-1vulnerable
Ubunturedispro5:4.0.8-2vulnerable
Ubunturedispro5:4.0.9-1vulnerable
Ubunturedispro5:4.0.9-1ubuntu0.1vulnerable
Ubunturedispro5:4.0.9-1ubuntu0.2vulnerable
Ubunturedispro5:4.0.9-1ubuntu0.2+esm2vulnerable
Ubunturedispro5:4.0.9-1ubuntu0.2+esm3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianredissourcesid5:6.0.15-1not yet assignedNot reported[991375]
Debianredissourceforky5:6.0.15-1not yet assignedNot reported[991375]
Debianredissourcetrixie5:6.0.15-1not yet assignedNot reported[991375]
Debianredissourcebookworm5:6.0.15-1not yet assignedNot reported[991375]
Alpineredisapk3.115.0.13-r0Not reportedALPINE-CVE-2021-32761Not reported
Alpineredisapk3.125.0.13-r0Not reportedALPINE-CVE-2021-32761Not reported
Alpineredisapk3.136.0.13-r0Not reportedALPINE-CVE-2021-32761Not reported
Alpineredisapk3.146.2.5-r0Not reportedALPINE-CVE-2021-32761Not reported
Alpineredisapk3.156.2.5-r0Not reportedALPINE-CVE-2021-32761Not reported
Alpineredisapk3.166.2.5-r0Not reportedALPINE-CVE-2021-32761Not reported
Alpineredisapk3.176.2.5-r0Not reportedALPINE-CVE-2021-32761Not reported
Alpineredisapk3.186.2.5-r0Not reportedALPINE-CVE-2021-32761Not reported
Alpineredisapk3.196.2.5-r0Not reportedALPINE-CVE-2021-32761Not reported
Ubunturedisdebpro5:4.0.9-1ubuntu0.2+esm3Not reportedUBUNTU-CVE-2021-32761Not reported

[Debian bug #991375]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [redis]Unknown
    Details (4)

    • 5:7.0.15-1~deb12u7 · all · bookworm

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u7 · all · bookworm

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · all · bookworm-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · all · bookworm-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

  • [redis-sentinel]Unknown

    Source package: [redis]

    Details (4)

    • 5:7.0.15-1~deb12u7 · amd64 · bookworm

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u7 · arm64 · bookworm

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

  • [redis-server]Unknown

    Source package: [redis]

    Details (4)

    • 5:7.0.15-1~deb12u7 · amd64 · bookworm

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u7 · arm64 · bookworm

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

  • [redis-tools]Unknown

    Source package: [redis]

    Details (4)

    • 5:7.0.15-1~deb12u7 · amd64 · bookworm

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u7 · arm64 · bookworm

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

[Debian 13 (Trixie)]

  • [redis]Unknown
    Details (5)

    • 5:8.0.2-3+deb13u2 · all · trixie

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · all · trixie

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · all · trixie-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · all · trixie-security · Historical version

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u3 · all · trixie-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

  • [redis-sentinel]Unknown

    Source package: [redis]

    Details (5)

    • 5:8.0.2-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

  • [redis-server]Unknown

    Source package: [redis]

    Details (5)

    • 5:8.0.2-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

  • [redis-tools]Unknown

    Source package: [redis]

    Details (5)

    • 5:8.0.2-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 5:6.0.15-1

      dsa · redis · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]