onyx

onyx --cves cve-2021-32628

CVE-2021-32628

HIGHRedis
score
<0.1
cvss
7.5
epss
13.5%
published
2021-10-04
kev added
—
first seen

Redis contains an integer overflow caused by modifying default ziplist configuration parameters to very large values, letting attackers craft large ziplists to potentially execute remote code, exploit requires configuration modification and crafted commands.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2021-10-04 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 13.5%2026-09-23: epss 13.5%2026-09-24: epss 13.5%2026-09-25: epss 13.5%2026-09-26: epss 13.5%2026-09-27: epss 13.5%2026-09-28: epss 13.5%2026-09-29: epss 13.5%2026-09-30: epss 13.5%2026-10-01: epss 13.5%2026-10-02: epss 13.5%2026-10-03: epss 13.5%2026-10-04: epss 13.5%2026-10-05: epss 13.5%2026-10-06: epss 13.5%2026-10-07: epss 13.5%2026-10-08: epss 13.5%2026-10-09: epss 13.5%2026-10-10: epss 13.5%2026-10-11: epss 13.5%2026-10-12: epss 13.5%2026-10-13: epss 13.5%2026-10-14: epss 13.5%2026-10-15: epss 13.5%2026-10-16: epss 13.5%2026-10-18: epss 13.5%2026-10-19: epss 13.5%2026-10-20: epss 13.5%2026-10-21: epss 13.5%13.5%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-190

References 9