Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions of Redis with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing LUA scripts. This can be done using ACL to block a script by restricting both the EVAL and FUNCTION command families.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:19237 advisory.

    * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)
      * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)
      * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)
      * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:19238 advisory.

    * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)
      * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)
      * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)
      * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19238 advisory.

    [6.2.20-1.0.1]
    - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64

    [6.2.20-1]
    - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19237 advisory.

    [6.2.20-1]
    - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19237 advisory.

    Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can     contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data     set. You can persist it either by dumping the data set to disk every once in a while, or by appending each     command to a log.

    Security Fix(es):

    * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)

    * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)

    * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)

    * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-fd6619a49f advisory.

    **Valkey 8.1.4**

    Upgrade urgency SECURITY: This release includes security fixes we recommend you     apply as soon as possible.

    Security fixes

    * **CVE-2025-49844** A Lua script may lead to remote code execution
    * **CVE-2025-46817** A Lua script may lead to integer overflow and potential RCE
    * **CVE-2025-46818** A Lua script can be executed in the context of another user
    * **CVE-2025-46819** LUA out-of-bound read

    Bug fixes

    * Fix accounting for dual channel RDB bytes in replication stats (#2614)
    * Fix EVAL to report unknown error when empty error table is provided (#2229)
    * Fix use-after-free when active expiration triggers hashtable to shrink (#2257)
    * Fix MEMORY USAGE to account for embedded keys (#2290)
    * Fix memory leak when shrinking a hashtable without entries (#2288)
    * Prevent potential assertion in active defrag handling large allocations (#2353)
    * Prevent bad memory access when NOTOUCH client gets unblocked (#2347)
    * Converge divergent shard-id persisted in nodes.conf to primary's shard id (#2174)
    * Fix client tracking memory overhead calculation (#2360)
    * Fix RDB load per slot memory pre-allocation when loading from RDB snapshot (#2466)
    * Don't use AVX2 instructions if the CPU doesn't support it (#2571)
    * Fix bug where active defrag may be unable to defrag sparsely filled pages (#2656)

    Packaging changes

    * add new sub-package **valkey-tls** for the TLS encryption module, which was previously built into main     valkey
    * add new sub-package **valkey-rdma** for the RDMA (Remote Direct Memory Access ) module, this a new     optional feature




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of redis installed on the remote host is prior to 6.2.20-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2REDIS6-2025-015 advisory.

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an     authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead     to remote code execution The problem exists in all versions of Redis with Lua scripting. This issue is     fixed in version 8.2.2. (CVE-2025-46817)

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an     authenticated user to use a specially crafted Lua script to manipulate different LUA objects and     potentially run their own code in the context of another user. The problem exists in all versions of Redis     with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without     patching the redis-server executable is to prevent users from executing LUA scripts. This can be done     using ACL to block a script by restricting both the EVAL and FUNCTION command families. (CVE-2025-46818)

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an     authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and     subsequent denial of service. The problem exists in all versions of Redis with Lua scripting. This issue     is fixed in version 8.2.2. To workaround this issue without patching the redis-server executable is to     prevent users from executing Lua scripts. This can be done using ACL to block a script by restricting both     the EVAL and FUNCTION command families. (CVE-2025-46819)

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an     authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a     use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis     with Lua scripting. This issue is fixed in version 8.2.2. To workaround this issue without patching the     redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to     restrict EVAL and EVALSHA commands. (CVE-2025-49844)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1221 advisory.

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an     authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead     to remote code execution The problem exists in all versions of Redis with Lua scripting. This issue is     fixed in version 8.2.2. (CVE-2025-46817)

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an     authenticated user to use a specially crafted Lua script to manipulate different LUA objects and     potentially run their own code in the context of another user. The problem exists in all versions of Redis     with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without     patching the redis-server executable is to prevent users from executing LUA scripts. This can be done     using ACL to block a script by restricting both the EVAL and FUNCTION command families. (CVE-2025-46818)

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an     authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and     subsequent denial of service. The problem exists in all versions of Redis with Lua scripting. This issue     is fixed in version 8.2.2. To workaround this issue without patching the redis-server executable is to     prevent users from executing Lua scripts. This can be done using ACL to block a script by restricting both     the EVAL and FUNCTION command families. (CVE-2025-46819)

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an     authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a     use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis     with Lua scripting. This issue is fixed in version 8.2.2. To workaround this issue without patching the     redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to     restrict EVAL and EVALSHA commands. (CVE-2025-49844)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1222 advisory.

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an     authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead     to remote code execution The problem exists in all versions of Redis with Lua scripting. This issue is     fixed in version 8.2.2. (CVE-2025-46817)

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an     authenticated user to use a specially crafted Lua script to manipulate different LUA objects and     potentially run their own code in the context of another user. The problem exists in all versions of Redis     with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without     patching the redis-server executable is to prevent users from executing LUA scripts. This can be done     using ACL to block a script by restricting both the EVAL and FUNCTION command families. (CVE-2025-46818)

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an     authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and     subsequent denial of service. The problem exists in all versions of Redis with Lua scripting. This issue     is fixed in version 8.2.2. To workaround this issue without patching the redis-server executable is to     prevent users from executing Lua scripts. This can be done using ACL to block a script by restricting both     the EVAL and FUNCTION command families. (CVE-2025-46819)

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an     authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a     use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis     with Lua scripting. This issue is fixed in version 8.2.2. To workaround this issue without patching the     redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to     restrict EVAL and EVALSHA commands. (CVE-2025-49844)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-00e79c49ca advisory.

    **Valkey 8.0.6**  -  Released Fri 03 October 2025


    Upgrade urgency SECURITY: This release includes security fixes we recommend you     apply as soon as possible.

    Security fixes

    * **CVE-2025-49844** A Lua script may lead to remote code execution
    * **CVE-2025-46817** A Lua script may lead to integer overflow and potential RCE
    * **CVE-2025-46818** A Lua script can be executed in the context of another user
    * **CVE-2025-46819** LUA out-of-bound read

    Bug fixes

    * Fix accounting for dual channel RDB bytes in replication stats (#2616)
    * Minor fix for dual rdb channel connection conn error log (#2658)
    * Fix unsigned difference expression compared to zero (#2101)

    ----

    **Valkey 8.0.5**  -  Released Thu 22 Aug 2025

    Upgrade urgency SECURITY: This release includes security fixes we recommend you     apply as soon as possible.

    Bug fixes

    * Fix clients remaining blocked when reprocessing commands after certain       blocking operations (#2109)
    * Fix a memory corruption issue in the sharded pub/sub unsubscribe logic (#2137)
    * Fix potential memory leak by ensuring module context is freed when `aux_save2`       callback writes no data (#2132)
    * Fix `CLIENT UNBLOCK` triggering unexpected errors when used on paused clients       (#2117)
    * Fix missing NULL check on `SSL_new()` when creating outgoing TLS connections       (#2140)
    * Fix incorrect casting of ping extension lengths to prevent silent packet drops       (#2144)
    * Fix replica failover stall due to outdated config epoch (#2178)
    * Fix incorrect port/tls-port info in `CLUSTER SLOTS`/`CLUSTER NODES` after       dynamic config change (#2186)
    * Ensure empty error tables in Lua scripts don't crash Valkey (#2229)
    * Fix client tracking memory overhead calculation (#2360)
    * Handle divergent shard-id from nodes.conf and reconcile to the primary node's       shard-id (#2174)
    * Fix pre-size hashtables per slot when reading RDB files (#2466)

    Behavior changes

    * Trigger election immediately during a forced manual failover (`CLUSTER       FAILOVER FORCE`) to avoid delay (#1067)
    * Reset ongoing election state when initiating a new manual failover (#1274)

    Logging and Tooling Improvements

    * Add support to drop all cluster packets (#1252)
    * Improve log clarity in failover auth denial message (#1341)

    Security fixes

    * **CVE-2025-27151**: Check length of AOF file name in valkey-check-aof and reject       paths longer than `PATH_MAX` (#2146)



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3055a5b407 advisory.

    **Valkey 8.0.6**  -  Released Fri 03 October 2025


    Upgrade urgency SECURITY: This release includes security fixes we recommend you     apply as soon as possible.

    Security fixes

    * **CVE-2025-49844** A Lua script may lead to remote code execution
    * **CVE-2025-46817** A Lua script may lead to integer overflow and potential RCE
    * **CVE-2025-46818** A Lua script can be executed in the context of another user
    * **CVE-2025-46819** LUA out-of-bound read

    Bug fixes

    * Fix accounting for dual channel RDB bytes in replication stats (#2616)
    * Minor fix for dual rdb channel connection conn error log (#2658)
    * Fix unsigned difference expression compared to zero (#2101)

    ----

    **Valkey 8.0.5**  -  Released Thu 22 Aug 2025

    Upgrade urgency SECURITY: This release includes security fixes we recommend you     apply as soon as possible.

    Bug fixes

    * Fix clients remaining blocked when reprocessing commands after certain       blocking operations (#2109)
    * Fix a memory corruption issue in the sharded pub/sub unsubscribe logic (#2137)
    * Fix potential memory leak by ensuring module context is freed when `aux_save2`       callback writes no data (#2132)
    * Fix `CLIENT UNBLOCK` triggering unexpected errors when used on paused clients       (#2117)
    * Fix missing NULL check on `SSL_new()` when creating outgoing TLS connections       (#2140)
    * Fix incorrect casting of ping extension lengths to prevent silent packet drops       (#2144)
    * Fix replica failover stall due to outdated config epoch (#2178)
    * Fix incorrect port/tls-port info in `CLUSTER SLOTS`/`CLUSTER NODES` after       dynamic config change (#2186)
    * Ensure empty error tables in Lua scripts don't crash Valkey (#2229)
    * Fix client tracking memory overhead calculation (#2360)
    * Handle divergent shard-id from nodes.conf and reconcile to the primary node's       shard-id (#2174)
    * Fix pre-size hashtables per slot when reading RDB files (#2466)

    Behavior changes

    * Trigger election immediately during a forced manual failover (`CLUSTER       FAILOVER FORCE`) to avoid delay (#1067)
    * Reset ongoing election state when initiating a new manual failover (#1274)

    Logging and Tooling Improvements

    * Add support to drop all cluster packets (#1252)
    * Improve log clarity in failover auth denial message (#1341)

    Security fixes

    * **CVE-2025-27151**: Check length of AOF file name in valkey-check-aof and reject       paths longer than `PATH_MAX` (#2146)



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03502-1 advisory.

    This update for valkey to version 8.0.6 fixes the following security issues:

    - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution.
      [bsc#1250995]

    - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and       potential remote code execution. [bsc#1250995]

    - CVE-2025-46818: Malicious Lua scripts can be executed in the context of       another user. [bsc#1250995]

    - CVE-2025-46819: Malicious Lua scripts can trigger out-of-bound reads to       facilitate denial-of-service attacks. [bsc#1250995]

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03505-1 advisory.

    - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution.
      [bsc#1250995]

    - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and       potential remote code execution. [bsc#1250995]

    - CVE-2025-46818: Malicious Lua scripts can be executed in the context of       another user. [bsc#1250995]

    - CVE-2025-46819: Malicious Lua scripts can trigger out-of-bound reads to       facilitate denial-of-service attacks. [bsc#1250995]

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03506-1 advisory.

    - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution.
      [bsc#1250995]

    - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and       potential remote code execution. [bsc#1250995]

    - CVE-2025-46818: Malicious Lua scripts can be executed in the context of       another user. [bsc#1250995]

    - CVE-2025-46819: Malicious Lua scripts can trigger out-of-bound reads to       facilitate denial-of-service attacks. [bsc#1250995]

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03501-1 advisory.

    - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution.
      [bsc#1250995]

    - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and       potential remote code execution. [bsc#1250995]

    - CVE-2025-46818: Malicious Lua scripts can be executed in the context of       another user. [bsc#1250995]

    - CVE-2025-46819: Malicious Lua scripts can trigger out-of-bound reads to       facilitate denial-of-service attacks. [bsc#1250995]

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03507-1 advisory.

    - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution.
      [bsc#1250995]

    - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and       potential remote code execution. [bsc#1250995]

    - CVE-2025-46818: Malicious Lua scripts can be executed in the context of       another user. [bsc#1250995]

    - CVE-2025-46819: Malicious Lua scripts can trigger out-of-bound reads to       facilitate denial-of-service attacks. [bsc#1250995]

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6022 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6022-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     October 09, 2025                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : valkey     CVE ID         : CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 CVE-2025-49844

    Multiple security issues were discovered in the Lua scripting interface     of Valkey, a persistent key-value database, which could result in the     execution of arbitrary code or denial of service.

    For the stable distribution (trixie), these problems have been fixed in     version 8.1.1+dfsg1-3+deb13u1.

    We recommend that you upgrade your valkey packages.

    For the detailed security status of valkey please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/valkey

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03499-1 advisory.

    - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution.
      [bsc#1250995]

    - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and       potential remote code execution. [bsc#1250995]

    - CVE-2025-46818: Malicious Lua scripts can be executed in the context of       another user. [bsc#1250995]

    - CVE-2025-46819: Malicious Lua scripts can trigger out-of-bound reads to       facilitate denial-of-service attacks. [bsc#1250995]

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03500-1 advisory.

    - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution.
      [bsc#1250995]

    - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and       potential remote code execution. [bsc#1250995]

    - CVE-2025-46818: Malicious Lua scripts can be executed in the context of       another user. [bsc#1250995]

    - CVE-2025-46819: Malicious Lua scripts can trigger out-of-bound reads to       facilitate denial-of-service attacks. [bsc#1250995]

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6020 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6020-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     October 08, 2025                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : redis     CVE ID         : CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 CVE-2025-49844

    Multiple security issues were discovered in the Lua scripting interface     of Redis, a persistent key-value database, which could result in the     execution of arbitrary code or denial of service.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 5:7.0.15-1~deb12u6.

    For the stable distribution (trixie), these problems have been fixed in     version 5:8.0.2-3+deb13u1.

    We recommend that you upgrade your redis packages.

    For the detailed security status of redis please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/redis

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an     authenticated user to use a specially crafted Lua script to manipulate different LUA objects and     potentially run their own code in the context of another user. The problem exists in all versions of Redis     with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without     patching the redis-server executable is to prevent users from executing LUA scripts. This can be done     using ACL to block a script by restricting both the EVAL and FUNCTION command families. (CVE-2025-46818)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0258d37d-a118-11f0-9446-f02f7497ecda advisory.

    redis reports:

                An authenticated user may use a specially crafted Lua script to                 manipulate different LUA objects and potentially run their own code                 in the context of another user                 The problem exists in all versions of Redis with Lua scripting.
                An additional workaround to mitigate the problem without patching                 the redis-server executable is to prevent users from executing Lua                 scripts. This can be done using ACL to block a script by restricting                 both the EVAL and FUNCTION command families.


Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
272071	AlmaLinux 9 : redis (ALSA-2025:19237)	Nessus	Alma Linux Local Security Checks	critical
272069	AlmaLinux 8 : redis:6 (ALSA-2025:19238)	Nessus	Alma Linux Local Security Checks	critical
272068	Oracle Linux 8 : redis:6 (ELSA-2025-19238)	Nessus	Oracle Linux Local Security Checks	critical
272067	Oracle Linux 9 : redis (ELSA-2025-19237)	Nessus	Oracle Linux Local Security Checks	critical
271976	RHEL 9 : redis (RHSA-2025:19237)	Nessus	Red Hat Local Security Checks	critical
271475	Fedora 43 : valkey (2025-fd6619a49f)	Nessus	Fedora Local Security Checks	critical
270551	Amazon Linux 2 : redis, --advisory ALAS2REDIS6-2025-015 (ALASREDIS6-2025-015)	Nessus	Amazon Linux Local Security Checks	critical
270533	Amazon Linux 2023 : valkey, valkey-devel (ALAS2023-2025-1221)	Nessus	Amazon Linux Local Security Checks	critical
270520	Amazon Linux 2023 : redis6, redis6-devel (ALAS2023-2025-1222)	Nessus	Amazon Linux Local Security Checks	critical
270124	Fedora 41 : valkey (2025-00e79c49ca)	Nessus	Fedora Local Security Checks	critical
270106	Fedora 42 : valkey (2025-3055a5b407)	Nessus	Fedora Local Security Checks	critical
269964	SUSE SLES15 Security Update : valkey (SUSE-SU-2025:03502-1)	Nessus	SuSE Local Security Checks	critical
269957	SUSE SLES15 / openSUSE 15 Security Update : redis (SUSE-SU-2025:03505-1)	Nessus	SuSE Local Security Checks	critical
269956	SUSE SLES15 Security Update : redis (SUSE-SU-2025:03506-1)	Nessus	SuSE Local Security Checks	critical
269955	SUSE SLES15 Security Update : redis7 (SUSE-SU-2025:03501-1)	Nessus	SuSE Local Security Checks	critical
269954	SUSE SLES15 Security Update : redis (SUSE-SU-2025:03507-1)	Nessus	SuSE Local Security Checks	critical
269918	Debian dsa-6022 : valkey-sentinel - security update	Nessus	Debian Local Security Checks	critical
269786	SUSE SLES15 / openSUSE 15 Security Update : valkey (SUSE-SU-2025:03499-1)	Nessus	SuSE Local Security Checks	critical
269781	SUSE SLES15 / openSUSE 15 Security Update : redis7 (SUSE-SU-2025:03500-1)	Nessus	SuSE Local Security Checks	critical
269759	Debian dsa-6020 : redis - security update	Nessus	Debian Local Security Checks	critical
269462	Linux Distros Unpatched Vulnerability : CVE-2025-46818	Nessus	Misc.	high
266601	FreeBSD : redis,valkey -- Running Lua function as a different user (0258d37d-a118-11f0-9446-f02f7497ecda)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2025-46818

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high

medium