CVE-2021-41099

High

Advisory

Published 4 Oct 2021In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.037; 89th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 7; of 17,781 indexed, latest versions
Container images: 8; deployed by those charts
Fix available: 3 of 3; affected packages

Integer overflow issue with strings in Redis

Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 8 images.

Affected package	Affected versions	Fixed in	Images
redisapk	5.0.7-r0, 5.0.9-r0, 6.0.11-r0	5.0.14-r0, 6.0.16-r0	4
redisbitnami	6.0.8-0, 6.0.12-0	5.0.14	2
redisdeb	5:5.0.7-2ubuntu0.1	5:5.0.7-2ubuntu0.1+esm1	2

OSV records: ALPINE-CVE-2021-41099 BIT-redis-2021-41099 UBUNTU-CVE-2021-41099
Also known as: BIT-keydb-2021-41099, BIT-valkey-2021-41099, GHSA-j3cr-9h5g-6cph, USN-5221-1

Charts affected

7 by stars

Chart

Latest

Affected images

Radar Score

netris-controllernetrisai

2.8.2

2 of 14 See more

netris-controller netrisai 2.8.2

2 of the 14 container images this version deploys carry CVE-2021-41099.

Container image	Digest	Package	Fixed in
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	redis@5.0.9-r0	5.0.14-r0
netrisai/redis :6.0.12-debian-10-r3	a4c0140d1696	redis@6.0.12-0	5.0.14

Open the chart page →

30,326

redis-pod-labelerhmdmph

1.0.2

1 of 1 See more

redis-pod-labeler hmdmph 1.0.2

1 of the 1 container images this version deploys carry CVE-2021-41099.

Container image	Digest	Package	Fixed in
hmdmph/redis-pod-labeler :1.0.0-alpine	7f1381fe0f3b	redis@5.0.9-r0	5.0.14-r0

Open the chart page →

2,985

faktoryadwerx

0.12.4

1 of 2 See more

faktory adwerx 0.12.4

1 of the 2 container images this version deploys carry CVE-2021-41099.

Container image	Digest	Package	Fixed in
contribsys/faktory :1.5.1	5f9a23ee4e86	redis@6.0.11-r0	6.0.16-r0

Open the chart page →

1,150

supportpalevilgn0me

0.1.6

1 of 1 See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2021-41099.

Container image	Digest	Package	Fixed in
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	redis@5:5.0.7-2ubuntu0.1	5:5.0.7-2ubuntu0.1+esm1

Open the chart page →

20,933

apica-ascentlogiqai

2.0.4

1 of 19 See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2021-41099.

Container image	Digest	Package	Fixed in
logiqai/toolbox :2.0.1	55a574ec5b64	redis@5.0.7-r0	5.0.14-r0

Open the chart page →

23,613

redisredis

0.1.1

1 of 1 See more

redis redis 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-41099.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/bitnami/redis :6.0.8.9	e1e9cf5297a6	redis@6.0.8-0	5.0.14

Open the chart page →

1,594

testing-multitoolsomeblackmagic

0.1.2

1 of 1 See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-41099.

Container image	Digest	Package	Fixed in
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	redis@5:5.0.7-2ubuntu0.1	5:5.0.7-2ubuntu0.1+esm1

Open the chart page →

30,687

Container images carrying it

8 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
contribsys/faktory :1.5.1	5f9a23ee4e86	redis@6.0.11-r0	6.0.16-r0	1
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	redis@5.0.9-r0	5.0.14-r0	1
hmdmph/redis-pod-labeler :1.0.0-alpine	7f1381fe0f3b	redis@5.0.9-r0	5.0.14-r0	1
logiqai/toolbox :2.0.1	55a574ec5b64	redis@5.0.7-r0	5.0.14-r0	1
netrisai/redis :6.0.12-debian-10-r3	a4c0140d1696	redis@6.0.12-0	5.0.14	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	redis@5:5.0.7-2ubuntu0.1	5:5.0.7-2ubuntu0.1+esm1	1
mcr.microsoft.com/oss/bitnami/redis :6.0.8.9	e1e9cf5297a6	redis@6.0.8-0	5.0.14	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	redis@5:5.0.7-2ubuntu0.1	5:5.0.7-2ubuntu0.1+esm1	1