[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fT6Zy4GIESNcbfcUxIDKUiiN-r-teGZ4uRKq6R_htD98":3,"g5a-risk:CVE-2021-32626":242},{"success":4,"data":5,"meta":240},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":26,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":93,"references":94,"referencesCount":134,"weaknesses":135,"weaknessesCount":149,"isActivelyExploited":150,"cisaInfo":26,"otxData":26,"relatedBlogPosts":151,"seoMetadata":152,"configurations":177,"relatedVendorCves":231,"notableEvents":232},"CVE-2021-32626","What is CVE-2021-32626?","Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with heap corruption and potentially remote code execution. This problem exists in all versions of Redis with Lua scripting support, starting from 2.6. The problem is fixed in versions 6.2.6, 6.0.16 and 5.0.14. For users unable to update an additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.","Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-b...","2021-10-04T18:15:08.14","2023-11-07T03:35:19.357",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":36,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":35,"ImpactScore":28},"a0819718-46f1-4df5-94e2-005712e83aaa","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":34,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",7.5,1.6,[37],{"Source":17,"Type":18,"CVSSData":38,"BaseSeverity":44,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":39,"VectorString":40,"AccessVector":21,"AccessComplexity":22,"Authentication":41,"ConfidentialityImpact":42,"IntegrityImpact":42,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.16206,[47,47,47,47,47,47,47],"High",[51,55,60,63,66,71,74,79,82,87,90],{"vendor":52,"product":52,"version":53,"criteria":54,"vulnerable":4},"redis","*","cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"fedoraproject","fedora","33","cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":61,"criteria":62,"vulnerable":4},"34","cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":64,"criteria":65,"vulnerable":4},"35","cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",{"vendor":67,"product":68,"version":69,"criteria":70,"vulnerable":4},"netapp","management_services_for_element_software","-","cpe:2.3:a:netapp:management_services_for_element_software:-:*:*:*:*:*:*:*",{"vendor":67,"product":72,"version":69,"criteria":73,"vulnerable":4},"management_services_for_netapp_hci","cpe:2.3:a:netapp:management_services_for_netapp_hci:-:*:*:*:*:*:*:*",{"vendor":75,"product":76,"version":77,"criteria":78,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":75,"product":76,"version":80,"criteria":81,"vulnerable":4},"11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",{"vendor":83,"product":84,"version":85,"criteria":86,"vulnerable":4},"oracle","communications_operations_monitor","4.3","cpe:2.3:a:oracle:communications_operations_monitor:4.3:*:*:*:*:*:*:*",{"vendor":83,"product":84,"version":88,"criteria":89,"vulnerable":4},"4.4","cpe:2.3:a:oracle:communications_operations_monitor:4.4:*:*:*:*:*:*:*",{"vendor":83,"product":84,"version":91,"criteria":92,"vulnerable":4},"5.0","cpe:2.3:a:oracle:communications_operations_monitor:5.0:*:*:*:*:*:*:*",11,[95,101,104,108,112,115,118,122,126,130],{"url":96,"source":97,"tags":98},"https:\u002F\u002Fgithub.com\u002Fredis\u002Fredis\u002Fcommit\u002F666ed7facf4524bf6d19b11b20faa2cf93fdf591","GitHub",[99,100],"Patch","Third Party Advisory",{"url":102,"source":97,"tags":103},"https:\u002F\u002Fgithub.com\u002Fredis\u002Fredis\u002Fsecurity\u002Fadvisories\u002FGHSA-p486-xggp-782c",[100],{"url":105,"source":106,"tags":107},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr75490c61c2cb7b6ae2c81238fd52ae13636c60435abcd732d41531a0%40%3Ccommits.druid.apache.org%3E","Apache",[],{"url":109,"source":110,"tags":111},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FHTYQ5ZF37HNGTZWVNJD3VXP7I6MEEF42\u002F","Fedoraproject",[],{"url":113,"source":110,"tags":114},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FVL5KXFN3ATM7IIM7Q4O4PWTSRGZ5744Z\u002F",[],{"url":116,"source":110,"tags":117},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FWR5WKJWXD4D6S3DJCZ56V74ESLTDQRAB\u002F",[],{"url":119,"source":120,"tags":121},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202209-17","Gentoo",[100],{"url":123,"source":124,"tags":125},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20211104-0003\u002F","Netapp",[100],{"url":127,"source":128,"tags":129},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2021\u002Fdsa-5001","Debian",[100],{"url":131,"source":132,"tags":133},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuapr2022.html","Oracle",[99,100],10,[136,144],{"id":137,"name":138,"description":139,"extendedDescription":140,"status":141,"abstraction":142,"structure":143},"CWE-122","Heap-based Buffer Overflow","A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().","","Draft","Variant","Simple",{"id":145,"name":146,"description":147,"extendedDescription":140,"status":141,"abstraction":148,"structure":143},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Base",2,false,[],{"title":153,"metaDescription":154,"keywords":155,"canonicalUrl":156,"structuredData":157},"What is CVE-2021-32626? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-32626, a high severity cyber security vulnerability from 2021. Redis is an open source, in-memory database that persists o...","CVE-2021-32626, CVE-2021-32626 vulnerability, CVE-2021-32626 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, redis security, fedoraproject security, netapp security, debian security, oracle security, redis vulnerability, fedora vulnerability, management_services_for_element_software vulnerability","\u002Fwhat-is\u002Fcve-2021-32626",{"@context":158,"@type":159,"headline":153,"description":154,"datePublished":10,"dateModified":11,"author":160,"publisher":164,"about":168,"mainEntityOfPage":172,"articleSection":175,"keywords":176},"https:\u002F\u002Fschema.org","TechArticle",{"@type":161,"name":162,"url":163},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":161,"name":162,"url":163,"logo":165},{"@type":166,"url":167},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":169,"name":6,"description":170,"additionalType":171},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":173,"@id":174},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-32626","Cybersecurity","CVE-2021-32626, CVE-2021-32626 vulnerability, CVE-2021-32626 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[178,195,205,213,221],{"Operator":26,"Negate":26,"Nodes":179},[180],{"Operator":181,"Negate":26,"CPEMatch":182},"OR",[183,187,191],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":184,"VersionStartExcluding":26,"VersionStartIncluding":185,"VersionEndExcluding":186,"VersionEndIncluding":26},"AF0E2817-5ED6-4954-99C9-CA444A018497","2.6","5.0.14",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":188,"VersionStartExcluding":26,"VersionStartIncluding":189,"VersionEndExcluding":190,"VersionEndIncluding":26},"02DF8086-645E-4D42-93D3-A4B11D289C7C","6.0.0","6.0.16",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":192,"VersionStartExcluding":26,"VersionStartIncluding":193,"VersionEndExcluding":194,"VersionEndIncluding":26},"4686800E-16BA-42CE-B691-011D1D5D0CC2","6.2.0","6.2.6",{"Operator":26,"Negate":26,"Nodes":196},[197],{"Operator":181,"Negate":26,"CPEMatch":198},[199,201,203],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":200,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E460AA51-FCDA-46B9-AE97-E6676AA5E194",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":202,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A930E247-0B43-43CB-98FF-6CE7B8189835",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":204,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"80E516C0-98A4-4ADE-B69F-66A772E2BAAA",{"Operator":26,"Negate":26,"Nodes":206},[207],{"Operator":181,"Negate":26,"CPEMatch":208},[209,211],{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":210,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"86B51137-28D9-41F2-AFA2-3CC22B4954D1",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":212,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4455CF3A-CC91-4BE4-A7AB-929AC82E34F5",{"Operator":26,"Negate":26,"Nodes":214},[215],{"Operator":181,"Negate":26,"CPEMatch":216},[217,219],{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":218,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":220,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FA6FEEC2-9F11-4643-8827-749718254FED",{"Operator":26,"Negate":26,"Nodes":222},[223],{"Operator":181,"Negate":26,"CPEMatch":224},[225,227,229],{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":226,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CBE1A019-7BB6-4226-8AC4-9D6927ADAEFA",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":228,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B98BAEB2-A540-4E8A-A946-C4331B913AFD",{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":230,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B8FBE260-E306-4215-80C0-D2D27CA43E0F",[],[233],{"id":234,"eventType":235,"eventTime":236,"details":237,"label":238,"color":239},"a2585ae0-2f26-4a2f-9964-c8a2d87c5f6a","HIGH_EPSS_DELTA","2026-06-16T04:05:38.495752+00:00","Daily EPSS score increased by 0.127 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":241,"version":39},1792344853825,{"score":243,"band":244,"action":245,"scoredAt":246},45,"Medium","Plan remediation","2026-10-16T06:52:12.419679+00:00"]