CVE-2024-51741

State: PUBLISHED · Published: 2025-01-06 · Updated: 2025-01-06 · Assigner: GitHub_M

Description

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.

CWE

CWE-20 — CWE-20: Improper Input Validation

Affected

redis / redis — v=>= 7.0.0, < 7.2.7 [affected]; v=>= 7.4.0, < 7.4.2 [affected]

CVSS

3.1 score=4.4 severity=MEDIUM CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References

https://github.com/redis/redis/security/advisories/GHSA-prpq-rh5h-46g9 x_refsource_CONFIRM

Source

cvelistV5-main/cves/2024/51xxx/CVE-2024-51741.json