CVE catalog

CVE-2025-67733

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for

[CVE catalog]

Severity
High · CVSS 8.5
Published
Source
[NVD] · [CVE record]
EPSS
0.65% · Oct 25, 2026

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampered data to other users on the same connection. The error handling code for lua scripts does not properly handle null characters. Versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12 fix the issue.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianredissid5:8.0.6-3fixed
Debianredisforky5:8.0.6-3fixed
Debianredistrixie5:8.0.2-3+deb13u2fixed
Debianredistrixie-security5:8.0.2-3+deb13u3fixed
Debianredisbookworm5:7.0.15-1~deb12u7fixed
Debianredisbookworm-security5:7.0.15-1~deb12u10fixed
CpevalkeyNot reported7.2.12+dfsg1-0ubuntu0.1fixed
Cpevalkey-redis-compatNot reported7.2.12+dfsg1-0ubuntu0.1fixed
Cpevalkey-sentinelNot reported7.2.12+dfsg1-0ubuntu0.1fixed
Cpevalkey-serverNot reported7.2.12+dfsg1-0ubuntu0.1fixed
Cpevalkey-toolsNot reported7.2.12+dfsg1-0ubuntu0.1fixed
Alpinevalkey3.217.2.12-r0fixed
Alpinevalkey3.228.1.6-r0fixed
Alpinevalkey3.239.0.3-r0fixed
Alpinevalkey3.249.0.3-r0fixed
Ubuntuvalkey24.047.2.5+dfsg1-2ubuntu4~24.04.1vulnerable
Ubuntuvalkey24.047.2.7+dfsg1-0ubuntu0.24.04.1vulnerable
Ubuntuvalkey24.047.2.8+dfsg1-0ubuntu0.24.04.1vulnerable
Ubuntuvalkey24.047.2.8+dfsg1-0ubuntu0.24.04.2vulnerable
Ubuntuvalkey24.047.2.8+dfsg1-0ubuntu0.24.04.3vulnerable
Ubuntuvalkey24.047.2.10+dfsg1-0ubuntu0.1vulnerable
Ubuntuvalkey24.047.2.11+dfsg1-0ubuntu0.1vulnerable
Ubuntuvalkey24.047.2.11+dfsg1-0ubuntu0.2vulnerable
Ubuntuvalkey24.047.2.12+dfsg1-0ubuntu0.1fixed
Ubuntuvalkey25.108.0.2+dfsg1-1ubuntu1vulnerable
Ubuntuvalkey25.108.1.1+dfsg1-2ubuntu1vulnerable
Ubuntuvalkey25.108.1.3+dfsg1-0ubuntu1vulnerable
Ubuntuvalkey25.108.1.3+dfsg1-0ubuntu2vulnerable
Ubuntuvalkey25.108.1.4+dfsg1-0ubuntu0.1vulnerable
Ubuntuvalkey25.108.1.4+dfsg1-0ubuntu0.2vulnerable
Ubuntuvalkey25.108.1.6+dfsg1-0ubuntu0.1fixed
Ubuntuvalkey24.047.2.5+dfsg1-2ubuntu4~24.04.1vulnerable
Ubuntuvalkey24.047.2.7+dfsg1-0ubuntu0.24.04.1vulnerable
Ubuntuvalkey24.047.2.8+dfsg1-0ubuntu0.24.04.1vulnerable
Ubuntuvalkey24.047.2.8+dfsg1-0ubuntu0.24.04.2vulnerable
Ubuntuvalkey24.047.2.8+dfsg1-0ubuntu0.24.04.3vulnerable
Ubuntuvalkey24.047.2.10+dfsg1-0ubuntu0.1vulnerable
Ubuntuvalkey24.047.2.11+dfsg1-0ubuntu0.1vulnerable
Ubuntuvalkey24.047.2.11+dfsg1-0ubuntu0.2vulnerable
Ubuntuvalkey24.047.2.12+dfsg1-0ubuntu0.1fixed
Ubuntuvalkey25.108.0.2+dfsg1-1ubuntu1vulnerable
Ubuntuvalkey25.108.1.1+dfsg1-2ubuntu1vulnerable
Ubuntuvalkey25.108.1.3+dfsg1-0ubuntu1vulnerable
Ubuntuvalkey25.108.1.3+dfsg1-0ubuntu2vulnerable
Ubuntuvalkey25.108.1.4+dfsg1-0ubuntu0.1vulnerable
Ubuntuvalkey25.108.1.4+dfsg1-0ubuntu0.2vulnerable
Ubuntuvalkey25.108.1.6+dfsg1-0ubuntu0.1fixed
Opensusevalkeytumbleweed9.0.3-1.1fixed
Opensusevalkeyleap 15.68.0.7-150600.13.20.1fixed
Susevalkeylinux enterprise module for server applications 15 sp78.0.7-150700.3.14.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianredissourcesid5:8.0.6-1not yet assignedNot reported[1132205]
Debianredissourceforky5:8.0.6-1not yet assignedNot reported[1132205]
Debianredissourcetrixie5:8.0.2-3+deb13u2not yet assignedNot reported[1132205]
Debianredissourcebookworm5:7.0.15-1~deb12u7not yet assignedNot reported[1132205]
CpevalkeycpeNot reported7.2.12+dfsg1-0ubuntu0.1Not reportedNot reportedNot reported
Cpevalkey-redis-compatcpeNot reported7.2.12+dfsg1-0ubuntu0.1Not reportedNot reportedNot reported
Cpevalkey-sentinelcpeNot reported7.2.12+dfsg1-0ubuntu0.1Not reportedNot reportedNot reported
Cpevalkey-servercpeNot reported7.2.12+dfsg1-0ubuntu0.1Not reportedNot reportedNot reported
Cpevalkey-toolscpeNot reported7.2.12+dfsg1-0ubuntu0.1Not reportedNot reportedNot reported
Alpinevalkeyapk3.217.2.12-r0Not reportedALPINE-CVE-2025-67733Not reported
Alpinevalkeyapk3.228.1.6-r0Not reportedALPINE-CVE-2025-67733Not reported
Alpinevalkeyapk3.239.0.3-r0Not reportedALPINE-CVE-2025-67733Not reported
Alpinevalkeyapk3.249.0.3-r0Not reportedALPINE-CVE-2025-67733Not reported
Ubuntuvalkeydeb24.047.2.12+dfsg1-0ubuntu0.1Not reportedUBUNTU-CVE-2025-67733Not reported
Ubuntuvalkeydeb25.108.1.6+dfsg1-0ubuntu0.1Not reportedUBUNTU-CVE-2025-67733Not reported
Ubuntuvalkeydeb24.047.2.12+dfsg1-0ubuntu0.1Not reportedUSN-8106-1Not reported
Ubuntuvalkeydeb25.108.1.6+dfsg1-0ubuntu0.1Not reportedUSN-8106-1Not reported
Opensusevalkeyrpmtumbleweed9.0.3-1.1Not reportedOPENSUSE-SU-2026:10266-1Not reported
Opensusevalkeyrpmleap 15.68.0.7-150600.13.20.1Not reportedSUSE-SU-2026:0685-1Not reported
Susevalkeyrpmlinux enterprise module for server applications 15 sp78.0.7-150700.3.14.1Not reportedSUSE-SU-2026:0848-1Not reported

[Debian bug #1132205]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [valkey-compat-redis]Unknown

    Source package: [valkey]

    Details (1)

    • 9.1.1-1.2 · noarch · tumbleweed

      Unknown · Fixed: 9.0.3-1.1

      Version impact unknown

      nvd · valkey · opensuse · tumbleweed

  • [valkey-devel]Unknown

    Source package: [valkey]

    Details (1)

    • 9.1.1-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 9.0.3-1.1

      Version impact unknown

      nvd · valkey · opensuse · tumbleweed

  • [valkey]Fixed

    Source package: [valkey]

    Details (1)

    • 9.1.1-1.2 · x86_64 · tumbleweed

      Fixed · Fixed: 9.0.3-1.1

      nvd · valkey · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • [redis]Fixed
    Details (4)

    • 5:7.0.15-1~deb12u7 · all · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

    • 5:7.0.15-1~deb12u7 · all · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · all · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · all · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

  • [redis-sentinel]Fixed

    Source package: [redis]

    Details (4)

    • 5:7.0.15-1~deb12u7 · amd64 · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

    • 5:7.0.15-1~deb12u7 · arm64 · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

  • [redis-server]Fixed

    Source package: [redis]

    Details (4)

    • 5:7.0.15-1~deb12u7 · amd64 · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

    • 5:7.0.15-1~deb12u7 · arm64 · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

  • [redis-tools]Fixed

    Source package: [redis]

    Details (4)

    • 5:7.0.15-1~deb12u7 · amd64 · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

    • 5:7.0.15-1~deb12u7 · arm64 · bookworm

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

    • 5:7.0.15-1~deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 5:7.0.15-1~deb12u7

      nvd · redis · debian · bookworm; nvd · redis · debian · 12

[Debian 13 (Trixie)]

  • [redis]Fixed
    Details (5)

    • 5:8.0.2-3+deb13u2 · all · trixie

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · all · trixie

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · all · trixie-security · Historical version

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · all · trixie-security

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u3 · all · trixie-security

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

  • [redis-sentinel]Fixed

    Source package: [redis]

    Details (5)

    • 5:8.0.2-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

  • [redis-server]Fixed

    Source package: [redis]

    Details (5)

    • 5:8.0.2-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

  • [redis-tools]Fixed

    Source package: [redis]

    Details (5)

    • 5:8.0.2-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

    • 5:8.0.2-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 5:8.0.2-3+deb13u2

      nvd · redis · debian · 13

  • [valkey-sentinel]Fixed

    Source package: [valkey]

    Details (5)

    • 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

  • [valkey-server]Fixed

    Source package: [valkey]

    Details (5)

    • 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

  • [valkey-tools]Fixed

    Source package: [valkey]

    Details (5)

    • 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

    • 8.1.1+dfsg1-3+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 8.1.1+dfsg1-3+deb13u2

      nvd · valkey · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]