Cette page suit l'état du correctif pour Ubuntu. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-81934 →

UBUNTU-CVE-2026-81934

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configure...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Ubuntu:22.04:LTS redis

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.16-1ubuntu1.2"}]}]

Ubuntu:24.04:LTS redis

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1ubuntu0.24.04.5"}]}]

Ubuntu:26.04:LTS redis

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:8.0.5-1ubuntu0.1"}]}]

Description d'origine

Paquets affectés

Références