Redis XACKDEL 缓冲区溢出漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/redis/redis/security/advisories/GHSA-jhjx-x4cf-4vm8
• https://nvd.nist.gov/vuln/detail/CVE-2025-62507
• https://www.sentinelone.com/vulnerability-database/cve-2025-62507/
• https://jfrog.com/blog/exploiting-remote-code-execution-in-redis/
• https://hossted.com/knowledge-base/newsflash/data-management-and-analytics/database/redis-xackdel-stack-buffer-overflow-leading-to-potential-remote-code-execution/
• https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.APP:MISC:REDIS-XACKDEL-OF.html
• https://pentest-tools.com/vulnerabilities-exploits/redis-823-stack-buffer-overflow_28758
• https://www.heise.de/en/news/Database-Redis-Vulnerability-allows-execution-of-malicious-code-11053815.html

Related Vulnerabilities

• PoCredis-exporter-metrics: Redis Exporter Metrics - Exposure
• Redis-commander /signin 默认口令漏洞
• PoCredis-commander-default-login: Redis Commander - Default Login
• Redis 存在远程代码执行漏洞(CVE-2025-49844)
• Redis Lua 脚本 代码执行漏洞（CVE-2025-49844）
• Redis Lua脚本 UAF漏洞 可导致远程代码执行
• PoCCVE-2022-0543: Redis Sandbox Escape - Remote Code Execution
• PoCec2-unrestricted-redis: Unrestricted Redis Access
• PoCcache-redis-encryption-disabled: ElastiCache Redis In-Transit and At-Rest Encryption - Disabled
• PoCcache-redis-multiaz-disabled: ElastiCache Redis Multi-AZ - Disabled
• PoCazure-redis-nonssl-port-disabled: Azure Redis Cache In-Transit Encryption Not Enabled