Threats tagged 'ghsa-3gvw-xg56-j2xm'

CVE-2026-92925 is a high-severity vulnerability in Redis as packaged in Red Hat Enterprise Linux 9. It involves an out-of-bounds read in the cluster bus packet parser due to improper validation of string-carrying extensions lacking null-termination. This flaw allows a remote attacker to craft malicious packets that can cause sensitive information disclosure or a denial of service. Red Hat has released an important security update for the redis:7 module in RHEL 9.4 to address this issue.