CVE-2026-88382
CVE-2026-88382
This page contains facts from public vulnerability sources. Check the original advisory before updating.
hiredis commit 29ea279 (post-v1.5.0) contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser.
CVSS 7.5 · High · EPSS 0.4%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
hiredis Debian:12
- Versions
- 0.14.1-3
- 0.14.1-4
- 1.0.0-1
- 1.0.0-2
- 1.0.0-3
- 1.0.2-1
- 1.0.2-2
- 1.1.0~rc1-1
- 1.2.0-1
- 1.2.0-2
- 1.2.0-3
- 1.2.0-4
- 1.2.0-5
- 1.2.0-6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hiredis Debian:13
- Versions
- 1.2.0-6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hiredis Debian:14
- Versions
- 1.2.0-6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hiredis Ubuntu:Pro:14.04:LTS
- Versions
- 0.11.0-2
- 0.11.0-3
- 0.11.0-4+deb8u1build0.14.04.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hiredis Ubuntu:16.04:LTS
- Versions
- 0.13.1-2
- 0.13.3-1
- 0.13.3-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hiredis Ubuntu:18.04:LTS
- Versions
- 0.13.3-2
- 0.13.3-2.1
- 0.13.3-2.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hiredis Ubuntu:20.04:LTS
- Versions
- 0.14.0-3
- 0.14.0-4
- 0.14.0-6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hiredis Ubuntu:22.04:LTS
- Versions
- 0.14.1-1
- 0.14.1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hiredis Ubuntu:24.04:LTS
- Versions
- 0.14.1-3
- 0.14.1-4
- 1.2.0-6ubuntu1
- 1.2.0-6ubuntu2
- 1.2.0-6ubuntu3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hiredis Ubuntu:26.10
- Versions
- 1.2.0-6ubuntu4
- 1.2.0-6ubuntu5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hiredis Ubuntu:26.04:LTS
- Versions
- 1.2.0-6ubuntu3
- 1.2.0-6ubuntu4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published