High
Security advisory
Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default proto-max-bulk-len and client-query-buffer-limit configuration parameters to very large values and constructing specially crafted very large stream elements. The problem is fixed in Redis 6.2.6, 6.0.16 and 5.0.14. For users unable to upgrade an additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from modifying the proto-max-bulk-len configuration parameter. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2021-32627
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:27 UTC · Revision 1
Source evidence
Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default proto-max-bulk-len and client-query-buffer-limit configuration parameters to very large values and constructing specially crafted very large stream elements. The problem is fixed in Redis 6.2.6, 6.0.16 and 5.0.14. For users unable to upgrade an additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from modifying the proto-max-bulk-len configuration parameter. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.
osv:CVE-2021-32627
Complete source record
{
"id": "bd0ec594f4e35000472bcaf50e263dfccb1abcbd2897e3861057c1add7bef466",
"url": "https://osv.dev/vulnerability/CVE-2021-32627",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2021-32627",
"summary": "Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default proto-max-bulk-len and client-query-buffer-limit configuration parameters to very large values and constructing specially crafted very large stream elements. The problem is fixed in Redis 6.2.6, 6.0.16 and 5.0.14. For users unable to upgrade an additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from modifying the proto-max-bulk-len configuration parameter. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.",
"evidence": "osv:CVE-2021-32627",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2021-32627",
"aliases": [
"BIT-keydb-2021-32627",
"BIT-redis-2021-32627",
"BIT-valkey-2021-32627",
"CVE-2021-32627",
"GHSA-f434-69fm-g45v"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/redis/redis",
"type": "GIT",
"events": [
{
"introduced": "882ca6962f4ca32683b0e8db831de1b425c27d3c"
},
{
"fixed": "704ba5f5b22ae1ecafbcfb7a3258311c27ff94ff"
},
{
"introduced": "17dfd7cabbf7954f92b7a1243d4bb27fee5d4500"
},
{
"fixed": "5895d119b1c2825ff0394f30e246e036c3972bc5"
},
{
"introduced": "445aa844b946a8f1bc21ac8554b44adb1ecb4018"
},
{
"fixed": "4930d19e70c391750479951022e207e19111eb55"
},
{
"fixed": "f6a40570fa63d5afdd596c78083d754081d80ae3"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.0.0"
},
{
"fixed": "5.0.14"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "6.0.0"
},
{
"fixed": "6.0.16"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.2.6"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "f6a40570fa63d5afdd596c78083d754081d80ae3"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"6.2.5",
"6.0.15",
"5.0.13",
"5.0.12",
"6.0.14",
"6.2.4",
"6.2.3",
"6.0.13",
"6.2.2",
"6.0.12",
"6.2.1",
"6.2.0",
"6.0.11",
"5.0.11",
"5.0.10",
"6.0.10",
"6.0.9",
"6.0.8",
"6.0.7",
"6.0.6",
"6.0.5",
"6.0.4",
"6.0.3",
"6.0.2",
"6.0.1",
"6.0.0",
"5.0.9",
"5.0.8",
"5.0.7",
"5.0.6",
"5.0.5",
"5.0.4",
"5.0.3",
"5.0.2",
"5.0.1",
"5.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-32627.json",
"vanir_signatures": [
{
"id": "CVE-2021-32627-01719506",
"digest": {
"threshold": 0.9,
"line_hashes": [
"177701553511143564093119879725566345440",
"199764994612888104607497992280608088301",
"129117989992799934603059871262758909151",
"17359490478578795834805083423475367548",
"263147971075931425752526012689307640450",
"294247329867196371717408024926112967307",
"133176106484560945393825496472922247038",
"128766861816263981164960786312188319065",
"70654786849244767536483762380181312514",
"78870234736737040893301187959451924228",
"297082868619909892303080081472134998110",
"11927999680604796934856631938498273902",
"340209939362095427583224694751553968484",
"81928889758845176396923434574761265030",
"208930722641923129059921308995362695909",
"245690651348514796521570061192943020750",
"212819539860652345885485810057246478359",
"133370108886801448967370727224564934261",
"53729820372085485207384814522930655785",
"53496649603118690311426739969111102097",
"173703220254829878929137615758343641908",
"317143679376861216178351509357938972637",
"169279536682054749965156934002937462045",
"329672105130871964040122468783423249257"
]
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_stream.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-04c68498",
"digest": {
"threshold": 0.9,
"line_hashes": [
"288485056619694596751445556543126664429",
"256182100627001761989047256629007168049",
"33727582157733654668139137897721504755",
"177419892107398134691726859704239632118",
"263951156671431835969718126071350354336",
"220571484219504716140290980063771480616",
"103127449055227958438085528442704519169",
"163976489739730733184700306178521489603",
"20167160050130643794612624795891576517",
"205523291679535760408233070687178146880",
"75407180318704451699303769443305508093",
"242864016329495059946638760692662821099",
"272524051449382528118291094191902452"
]
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_hash.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-05110169",
"digest": {
"length": 541,
"function_hash": "91309076153243352249146321283396993661"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/quicklist.c",
"function": "quicklistPushTail"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-0c768b94",
"digest": {
"length": 205,
"function_hash": "132920217312579289773745424298387321351"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/ziplist.c",
"function": "ziplistResize"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-0de9d950",
"digest": {
"threshold": 0.9,
"line_hashes": [
"210611520423077404946891946319715189016",
"55934303359036013918596004753592700518",
"57252226033592965323245710166157331932",
"258981314502037832612173667337209453995",
"300782722177223566922975113724058746628",
"133549279575560606140557575440095645820",
"27314810951193207875649949334855733209",
"170679454102668966340329810919453683881",
"295498677175001663023751281683469731343",
"57225972855468283163942325127262658787"
]
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/ziplist.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-167e5942",
"digest": {
"threshold": 0.9,
"line_hashes": [
"195204541667770013520141600413078159007",
"279990814234850762344727953607507389807",
"193508104611048612212726016817404726286",
"134467033957015621741244375739720089349",
"272873120876937714278504512308517371156",
"179572000319917358070713587792369696247",
"297849254937963034463743287279264923306",
"323640365950270945043985160258340972302",
"283576245254172506755554660154056109547",
"47364581810232383183021266832899262094",
"329565046288533581991532259988505726361",
"315522231216367887827252453685271006059",
"57140177250720795646202974416060333656",
"156745294029191785033234343570049487197",
"301194918315234647822455741760656056014",
"162570152296751051455705021392870566755",
"326261477032207413585866858238692290846",
"78003253544383493649887844251578578714",
"77912665739949452972599911483223083402",
"236518800490813470349044333555276957083",
"115351791456532707679092126629031760764",
"205545588928282696597182929461730793584",
"211861753689152748324562069687136389149",
"160018954943193346605884806879560925905",
"115428042357179253216956883640893278161"
]
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/quicklist.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-168e1c04",
"digest": {
"threshold": 0.9,
"line_hashes": [
"172443871991340767057463162520779906924",
"235847370442089854742676128873900178042",
"244395909071608528724197269998904015997",
"27175349102203525673280952587684547413",
"258817744127217747288883482643140933841",
"143050433043590966532316185121067661559",
"87808741918782979800104723367925483712",
"231991171355329311584632920418976896951",
"85189494335913158176010470687980291516",
"217677430032727787972078646862517404652",
"134408682380390676084842919007510424701",
"268844364946848013518636234453147375377",
"310126683954214965139843044127407324945",
"281445662832323709543670183407108286215"
]
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/geo.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-1a17035c",
"digest": {
"length": 2968,
"function_hash": "39687838347341526323018632619305220918"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_stream.c",
"function": "streamAppendItem"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-1ee7c7b4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"99076856558016291924102625756699022123",
"98972798996975030337141047836123259696",
"14268177750262809685249398012484378503",
"15359576852344062880232393722397949982"
]
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/ziplist.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-249b8ec2",
"digest": {
"length": 1694,
"function_hash": "90265181006230318811611646856749800631"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/listpack.c",
"function": "lpEncodeGetType"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-31ca3aaf",
"digest": {
"length": 541,
"function_hash": "112330770517121000039232327522959277665"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/quicklist.c",
"function": "quicklistPushHead"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-3b7a95af",
"digest": {
"threshold": 0.9,
"line_hashes": [
"24110433281875764672032790734884389410",
"117650172945218533809776779357026449871",
"301662065285162593218131936641067428377",
"72865938207446049125523494487498647524",
"213273947003507008386012669152825614509",
"231210276460449169283532253117315654716",
"82676045794465673364783675446435911013",
"56142510655416651071269507259636255563",
"189850259357585849351976402464721555057",
"208049004548083478565265189332674761315",
"262420932257718585990115520807432644459",
"40955647932275861486178704689151642274",
"100249114575472810186208221690837991714",
"176654667695266647313870950203717073939",
"296052064969951524489212579904030216435",
"225953350606807691493295573344534332393",
"316533542182559705148247453253960581116",
"297767290672962915195414220163028756632",
"205664758542945928852735460895386053645",
"324127199920898750250597635899987267741",
"275787030715810464059678937101113637493",
"20865370763735933323772823127734446555",
"339630219601153057236917056034051246204",
"123112452208080878624113352331048875016",
"225173273843812918802135966802119699172",
"252986373572721326099248248436334364306",
"94446040391600978029071489973728464097",
"26030528401666948246421338639997579213",
"105992650920126735872314024649349131770",
"307297918514814707606189858147336484023",
"168655573907901644286447313574074056454",
"17165711132224818531725091899768011240"
]
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/rdb.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-3f26c394",
"digest": {
"length": 4583,
"function_hash": "274621646806361906276528551447901913094"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_zset.c",
"function": "zunionInterGenericCommand"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-454a0e78",
"digest": {
"length": 2147,
"function_hash": "226406602047279618917192082269054122073"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_list.c",
"function": "lposCommand"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-52d77fdb",
"digest": {
"length": 12289,
"function_hash": "140182390882677862547066485310992804303"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/rdb.c",
"function": "rdbLoadObject"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-579c3653",
"digest": {
"threshold": 0.9,
"line_hashes": [
"149955274742854954766259869346684759289",
"236362705615084218546954124100880258343",
"183754018898431210549385062993938261538",
"126010687001262674798729781930524616765"
]
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/server.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-6f63190b",
"digest": {
"length": 1520,
"function_hash": "75809927490991172769643658499131915668"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/ziplist.c",
"function": "ziplistMerge"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-72cfb255",
"digest": {
"length": 4178,
"function_hash": "180631831418372681249202813427165720340"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/geo.c",
"function": "georadiusGeneric"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-8f92c28e",
"digest": {
"length": 356,
"function_hash": "207903653856882867014778696354130019360"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_hash.c",
"function": "hashTypeTryConversion"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-907c5cc7",
"digest": {
"length": 2931,
"function_hash": "306785812365850904109700852646403278454"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/quicklist.c",
"function": "_quicklistInsert"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-912a0bfb",
"digest": {
"length": 778,
"function_hash": "249219195116954592425469489703188153558"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_list.c",
"function": "lsetCommand"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-b115261f",
"digest": {
"length": 809,
"function_hash": "162047016710286561014166243975017541613"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_list.c",
"function": "pushGenericCommand"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-b6cb1b5e",
"digest": {
"length": 2350,
"function_hash": "263266771022276878817357085197690834045"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_stream.c",
"function": "xaddCommand"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-b706f104",
"digest": {
"threshold": 0.9,
"line_hashes": [
"250982122532079358754146037785897745408",
"283364816835013923766661816908547352058",
"81457738705579922018585731761905880746",
"79513166440052618151219075040837533899",
"269423261538255460886980716652914072376",
"130918808362170891593433373042479073199",
"113645945080694125006491732606098787738",
"94506643686344061482107593509636210230",
"139598671582448924683512737457462869144",
"207674720322574234076463970751186383663",
"9198769407778293045285123811123872602",
"323235824336655422379822867301793722402",
"285835579273974968687892731760460882218",
"228612794428184613930068829647502451611",
"279993597579990528049181054587334418055",
"321335138575290857667867543324109486468",
"127973287076990402473134039137525167310",
"309193392602207378614207396585087108197",
"11950358553789364313226684022157392714",
"251997356566027646400748654995723407244",
"228391877626034483441700424175860208674",
"136499363286471729919714697769091024672",
"37817138168459089748083366699839994373",
"64125791146697354221649356379549003209",
"87446965919807842712218194404817012157",
"245611291182348996389467441784091433566",
"261849033514812517788044919055064315052",
"298248708429272973838107492081236769411",
"57271926300135858814577226386429076524",
"160500026225486866299952790337506573327",
"210501059035237548150537562595423053890",
"329924258112861499112476387891792600805",
"138771430106124441272069127371601044397",
"8821187989833122165312644879414386126",
"100954909795419123891071252790065998445",
"294030063407891041413367695668517742964",
"234204278832825309533114557553798302221",
"90739172576420442894680546534184995641",
"188424109757762392494905749524159250492"
]
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_zset.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-cdf742ac",
"digest": {
"threshold": 0.9,
"line_hashes": [
"72292482566148834012000618912210368031",
"325031419240253178036942024937355082097",
"255509595743686890355910317700592951091",
"275779194293982648146011495571087244052",
"47436238245233871449106196737985136849",
"35026163213989830206767743110825688363",
"302726123548352976104789974585754272371",
"135801311168932918499774931661834554148",
"312606358042403271572996756622954848190",
"89916009023167624747295594240656875744",
"58741712327766914764851443662106412430",
"91552763336979899063624863872212656700",
"136413113036240483727207215332138472446",
"116363217085679543192903239112644534601",
"210088501704161836337020437363680551515",
"294609441930946665328623209786798168215",
"226990167909708559446874936218504356387"
]
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_list.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-e870699e",
"digest": {
"threshold": 0.9,
"line_hashes": [
"74435646081275722299723196010566971905",
"68246649293747989281628623974082104813",
"99329104348290071453565437547767678057",
"225700913088614051919515300649198513211"
]
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/listpack.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-eda5c9ae",
"digest": {
"length": 945,
"function_hash": "175577866949753503047131411956016363047"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_list.c",
"function": "linsertCommand"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-f0bc7778",
"digest": {
"length": 1005,
"function_hash": "333140670001780378370110421832451901535"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_list.c",
"function": "lremCommand"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-f233d282",
"digest": {
"length": 2046,
"function_hash": "179634473205533345697813392655128495910"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_zset.c",
"function": "zsetAdd"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-32627-fbdfec93",
"digest": {
"length": 294,
"function_hash": "30702052946324888488543236717270496274"
},
"source": "https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"target": {
"file": "src/t_zset.c",
"function": "zsetConvertToZiplistIfNeeded"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:25:13Z"
}
}
],
"modified": "2026-10-24T14:25:13.229604915Z",
"provider": "osv",
"references": [
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HTYQ5ZF37HNGTZWVNJD3VXP7I6MEEF42/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VL5KXFN3ATM7IIM7Q4O4PWTSRGZ5744Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WR5WKJWXD4D6S3DJCZ56V74ESLTDQRAB/",
"https://github.com/redis/redis/security/advisories/GHSA-f434-69fm-g45v",
"https://security.gentoo.org/glsa/202209-17",
"https://security.netapp.com/advisory/ntap-20211104-0003/",
"https://www.debian.org/security/2021/dsa-5001",
"https://github.com/redis/redis/commit/f6a40570fa63d5afdd596c78083d754081d80ae3",
"https://www.oracle.com/security-alerts/cpuapr2022.html"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "10.0"
},
{
"last_affected": "10.0"
},
{
"introduced": "11.0"
},
{
"last_affected": "11.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"range": [
{
"introduced": "33"
},
{
"last_affected": "33"
},
{
"introduced": "34"
},
{
"last_affected": "34"
},
{
"introduced": "35"
},
{
"last_affected": "35"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_operations_monitor:4.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:communications_operations_monitor:4.4:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:communications_operations_monitor:5.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_operations_monitor",
"extracted_events": [
{
"range": [
{
"introduced": "4.3"
},
{
"last_affected": "4.3"
},
{
"introduced": "4.4"
},
{
"last_affected": "4.4"
},
{
"introduced": "5.0"
},
{
"last_affected": "5.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2021-32627",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 443742,
"published_at": "2021-10-04T18:15:08.353+00:00"
}