Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2024-51741

Redis allows denial-of-service due to malformed ACL selectors

Description

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

redis redis

  • >= 7.0.0, < 7.2.7affected
  • >= 7.4.0, < 7.4.2affected

References