CVE-2021-32672 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Low
Remote	Yes
Type	Information disclosure
Description	When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support (3.2 or newer). The problem is fixed in versions 6.2.6, 6.0.16 and 5.0.14.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-2438	redis	6.2.5-1	6.2.6-1	High	Fixed

References
https://github.com/redis/redis/security/advisories/GHSA-9mj9-xx53-qmxm https://github.com/redis/redis/commit/3e09be56a8a65ad2549452e5bf7a36eb991b8954