CVE-2025-27151 - Stack-based buffer overflow The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a boundary error when parsing file names. A remote attacker can trick the victim into passing an overly long file path to the redis-check-aof cli, trigger a stack-based buffer overflow and execute arbitrary code on the target system. Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b4c696f034dd583ae0f4fcccd6ca76c5c4f6b3d9 commit b4c696f034dd583ae0f4fcccd6ca76c5c4f6b3d9 Author: Petr Vaněk <arkamar@gentoo.org> AuthorDate: 2025-05-28 12:37:59 +0000 Commit: Petr Vaněk <arkamar@gentoo.org> CommitDate: 2025-05-28 13:11:25 +0000 dev-db/redis: add 8.0.2 Bug: https://bugs.gentoo.org/956744 Signed-off-by: Petr Vaněk <arkamar@gentoo.org> dev-db/redis/Manifest | 1 + dev-db/redis/redis-8.0.2.ebuild | 198 ++++++++++++++++++++++++++++++++++++++++ 2 files changed, 199 insertions(+) https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d328ef10e0b23d95e40770213496ca4814efefec commit d328ef10e0b23d95e40770213496ca4814efefec Author: Petr Vaněk <arkamar@gentoo.org> AuthorDate: 2025-05-28 12:36:40 +0000 Commit: Petr Vaněk <arkamar@gentoo.org> CommitDate: 2025-05-28 13:11:23 +0000 dev-db/redis: add 7.4.4 Bug: https://bugs.gentoo.org/956744 Signed-off-by: Petr Vaněk <arkamar@gentoo.org> dev-db/redis/Manifest | 1 + dev-db/redis/redis-7.4.4.ebuild | 196 ++++++++++++++++++++++++++++++++++++++++ 2 files changed, 197 insertions(+) https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c9a5d9b993c558ebbd36879c9e76548529c9689c commit c9a5d9b993c558ebbd36879c9e76548529c9689c Author: Petr Vaněk <arkamar@gentoo.org> AuthorDate: 2025-05-28 12:32:23 +0000 Commit: Petr Vaněk <arkamar@gentoo.org> CommitDate: 2025-05-28 13:11:22 +0000 dev-db/redis: add 7.2.9 Bug: https://bugs.gentoo.org/956744 Signed-off-by: Petr Vaněk <arkamar@gentoo.org> dev-db/redis/Manifest | 1 + dev-db/redis/redis-7.2.9.ebuild | 200 ++++++++++++++++++++++++++++++++++++++++ 2 files changed, 201 insertions(+)
