CVE catalog

CVE-2025-27151

redis: CVE-2025-27151

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.06% · Oct 25, 2026

Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlen(filepath) when copying a user-supplied file path into a fixed-size stack buffer. This allows an attacker to overflow the stack and potentially achieve code execution. This issue has been patched in version 8.0.2.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianredissid5:8.0.6-3fixed
Debianredisforky5:8.0.6-3fixed
Debianredistrixie5:8.0.2-3+deb13u2fixed
Debianredistrixie-security5:8.0.2-3+deb13u3fixed
Debianredisbookworm5:7.0.15-1~deb12u7fixed
Debianredisbookworm-security5:7.0.15-1~deb12u10fixed
Ubunturedis24.045:7.0.12-1vulnerable
Ubunturedis24.045:7.0.14-1vulnerable
Ubunturedis24.045:7.0.14-2vulnerable
Ubunturedis24.045:7.0.15-1vulnerable
Ubunturedis24.045:7.0.15-1build1vulnerable
Ubunturedis24.045:7.0.15-1build2vulnerable
Ubunturedis24.045:7.0.15-1ubuntu0.24.04.1vulnerable
Ubunturedis24.045:7.0.15-1ubuntu0.24.04.2vulnerable
Ubunturedis24.045:7.0.15-1ubuntu0.24.04.3vulnerable
Ubunturedis24.045:7.0.15-1ubuntu0.24.04.4vulnerable
Ubunturedis24.045:7.0.15-1ubuntu0.24.04.5vulnerable
Alpineredis3.187.0.15-r4fixed
Alpineredis3.197.2.9-r0fixed
Alpinevalkey3.207.2.9-r1fixed
Alpinevalkey3.217.2.9-r1fixed
Alpinevalkey3.228.1.1-r1fixed
Alpinevalkey3.238.1.1-r1fixed
Alpinevalkey3.248.1.1-r1fixed
Opensusevalkeytumbleweed8.1.2-1.1fixed
Suseredis7linux enterprise high performance computing 15 sp5-espos7.0.8-150500.3.21.1fixed
Suseredis7linux enterprise high performance computing 15 sp5-ltss7.0.8-150500.3.21.1fixed
Suseredis7linux enterprise server 15 sp5-ltss7.0.8-150500.3.21.1fixed
Suseredis7linux enterprise server for sap applications 15 sp57.0.8-150500.3.21.1fixed
Suseredis7linux enterprise module for server applications 15 sp67.0.8-150600.8.16.1fixed
Opensuseredis7leap 15.67.0.8-150600.8.16.1fixed
Susevalkeylinux enterprise module for server applications 15 sp68.0.2-150600.13.11.1fixed
Opensusevalkeyleap 15.68.0.2-150600.13.11.1fixed
Suseredislinux enterprise module for server applications 15 sp67.2.4-150600.3.12.1fixed
Opensuseredisleap 15.67.2.4-150600.3.12.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianredissourcesid5:8.0.2-2not yet assignedNot reported[1106822]
Debianredissourceforky5:8.0.2-2not yet assignedNot reported[1106822]
Debianredissourcetrixie5:8.0.2-2not yet assignedNot reported[1106822]
Debianredissourcebookworm5:7.0.15-1~deb12u5not yet assignedNot reported[1106822]
Alpineredisapk3.187.0.15-r4Not reportedALPINE-CVE-2025-27151Not reported
Alpineredisapk3.197.2.9-r0Not reportedALPINE-CVE-2025-27151Not reported
Alpinevalkeyapk3.207.2.9-r1Not reportedALPINE-CVE-2025-27151Not reported
Alpinevalkeyapk3.217.2.9-r1Not reportedALPINE-CVE-2025-27151Not reported
Alpinevalkeyapk3.228.1.1-r1Not reportedALPINE-CVE-2025-27151Not reported
Alpinevalkeyapk3.238.1.1-r1Not reportedALPINE-CVE-2025-27151Not reported
Alpinevalkeyapk3.248.1.1-r1Not reportedALPINE-CVE-2025-27151Not reported
Opensusevalkeyrpmtumbleweed8.1.2-1.1Not reportedOPENSUSE-SU-2025:15306-1Not reported
Suseredis7rpmlinux enterprise high performance computing 15 sp5-espos7.0.8-150500.3.21.1Not reportedSUSE-SU-2025:02681-1Not reported
Suseredis7rpmlinux enterprise high performance computing 15 sp5-ltss7.0.8-150500.3.21.1Not reportedSUSE-SU-2025:02681-1Not reported
Suseredis7rpmlinux enterprise server 15 sp5-ltss7.0.8-150500.3.21.1Not reportedSUSE-SU-2025:02681-1Not reported
Suseredis7rpmlinux enterprise server for sap applications 15 sp57.0.8-150500.3.21.1Not reportedSUSE-SU-2025:02681-1Not reported
Suseredis7rpmlinux enterprise module for server applications 15 sp67.0.8-150600.8.16.1Not reportedSUSE-SU-2025:02679-1Not reported
Opensuseredis7rpmleap 15.67.0.8-150600.8.16.1Not reportedSUSE-SU-2025:02679-1Not reported
Susevalkeyrpmlinux enterprise module for server applications 15 sp68.0.2-150600.13.11.1Not reportedSUSE-SU-2025:02231-1Not reported
Opensusevalkeyrpmleap 15.68.0.2-150600.13.11.1Not reportedSUSE-SU-2025:02231-1Not reported
Suseredisrpmlinux enterprise module for server applications 15 sp67.2.4-150600.3.12.1Not reportedSUSE-SU-2025:02190-1Not reported
Opensuseredisrpmleap 15.67.2.4-150600.3.12.1Not reportedSUSE-SU-2025:02190-1Not reported

[Debian bug #1106822]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [valkey-compat-redis]Unknown

    Source package: [valkey]

    Details (1)

    • 9.1.1-1.2 · noarch · tumbleweed

      Unknown · Fixed: 8.1.2-1.1

      Version impact unknown

      dsa · valkey · opensuse · tumbleweed

  • [valkey-devel]Unknown

    Source package: [valkey]

    Details (1)

    • 9.1.1-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 8.1.2-1.1

      Version impact unknown

      dsa · valkey · opensuse · tumbleweed

  • [valkey]Fixed

    Source package: [valkey]

    Details (1)

    • 9.1.1-1.2 · x86_64 · tumbleweed

      Fixed · Fixed: 8.1.2-1.1

      dsa · valkey · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • [redis]Fixed
    Details (4)

    • 5:7.0.15-1~deb12u7 · all · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u7 · all · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · all · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · all · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

  • [redis-sentinel]Fixed

    Source package: [redis]

    Details (4)

    • 5:7.0.15-1~deb12u7 · amd64 · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u7 · arm64 · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

  • [redis-server]Fixed

    Source package: [redis]

    Details (4)

    • 5:7.0.15-1~deb12u7 · amd64 · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u7 · arm64 · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

  • [redis-tools]Fixed

    Source package: [redis]

    Details (4)

    • 5:7.0.15-1~deb12u7 · amd64 · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u7 · arm64 · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u5

      dsa · redis · debian · bookworm; dsa · redis · debian · 12

[Debian 13 (Trixie)]

  • [redis]Fixed
    Details (5)

    • 5:8.0.2-3+deb13u2 · all · trixie

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · all · trixie

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · all · trixie-security · Historical version

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · all · trixie-security

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u3 · all · trixie-security

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

  • [redis-sentinel]Fixed

    Source package: [redis]

    Details (5)

    • 5:8.0.2-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

  • [redis-server]Fixed

    Source package: [redis]

    Details (5)

    • 5:8.0.2-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

  • [redis-tools]Fixed

    Source package: [redis]

    Details (5)

    • 5:8.0.2-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

    • 5:8.0.2-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 5:8.0.2-2

      dsa · redis · debian · 13

  • [valkey-sentinel]Fixed

    Source package: [valkey]

    Details (5)

    • 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

  • [valkey-server]Fixed

    Source package: [valkey]

    Details (5)

    • 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

  • [valkey-tools]Fixed

    Source package: [valkey]

    Details (5)

    • 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 8.1.1+dfsg1-1.1

      dsa · valkey · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]