©2026 Cisco and/or its affiliates. Snort, the Snort and Pig logo are registered trademarks of Cisco. All rights reserved.
SERVER-OTHER -- Snort has detected traffic exploiting vulnerabilities in a server in the network.
SERVER-OTHER Redis COMMAND GETKEYS memory corruption attempt
This rule looks for a Redis protocol request that includes a "COMMAND" "GETKEYS" (or "GETKEYSANDFLAGS") followed by a "ZUNIONSTORE" command within a large payload. Successful exploitation may lead to heap memory corruption and remote code execution on the targeted Redis instance.
This rule fires on attempts to exploit a memory corruption vulnerability in Redis servers.
No public information
No known false positives
Cisco Talos Intelligence Group
Rule Categories::Server::Other
MITRE::ATT&CK Framework::Enterprise::Impact::Endpoint Denial of Service::Application or System Exploitation
Vulnerability::Severity::Critical
Vulnerability::Severity::High
Vulnerability::Severity::Medium
Buffer Overflow
Buffer Overflows occur when a memory location is filled past its expected boundaries. Computer attackers target systems without proper terminating conditions on buffers, which then write the additional information in other locations in memory, overwriting what is there. This could corrupt the data, making the system behave erratically or crash. The new information could include malicious executable code, which might be executed.
CVE-2023-36824 |
Loading description
|
©2026 Cisco and/or its affiliates. Snort, the Snort and Pig logo are registered trademarks of Cisco. All rights reserved.