PT-2025-40555 · Redis+10 · Redis+10

Zhutyra · Publicado 2024-05-02 · Atualizado 2026-05-18 · CVE-2025-46817

Positive Technologies (AI Summary) · Pt

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Nome do Software Vulnerável e Versões Afetadas Versões do Redis 8.2.1 e inferiores Versões do Redis anteriores à 8.2.2

Descrição O Redis, um banco de dados na memória, apresenta uma falha na qual um usuário autenticado pode utilizar um script Lua manipulado para provocar um estouro de inteiro. Isso pode potencialmente levar à execução remota de código. O problema existe em todas as versões do Redis com script Lua habilitado.

Recomendações Atualize para a versão 8.2.2 ou posterior do Redis.

Exploit

Correção

DoS

RCE

Integer Overflow

Enumeração de Fraquezas

CWE-399

CWE-190

Identificadores relacionados

ALSA-2025:19237

ALSA-2025:19238

ALSA-2025:19345

ALSA-2025:19675

ALSA-2025:20926

ALSA-2025:20955

ALSA-2025:21916

ALSA-2025:21936

ALSA-2025_16880

ALSA-2025_19237

ALSA-2025_19238

ALSA-2025_19345

ALSA-2025_20926

ALSA-2025_20955

ALSA-2025_21916

ALT-PU-2025-12931

ALT-PU-2025-12954

ALT-PU-2025-13204

AZL-68238

AZL-68661

AZL-68664

BDU:2025-01671

BDU:2025-12820

BIT-KEYDB-2025-46817

BIT-REDIS-2025-46817

BIT-VALKEY-2025-46817

CESA-2025_19238

CLEANSTART-2026-AF35851

CLEANSTART-2026-AV02020

CLEANSTART-2026-BX37171

CLEANSTART-2026-CJ12020

CLEANSTART-2026-CU71831

CLEANSTART-2026-DI78859

CLEANSTART-2026-DL37890

CLEANSTART-2026-EL98096

CLEANSTART-2026-GJ95666

CLEANSTART-2026-IR62391

CLEANSTART-2026-JR53141

CLEANSTART-2026-LU31244

CLEANSTART-2026-MZ27698

CLEANSTART-2026-PR27884

CLEANSTART-2026-QK48981

CLEANSTART-2026-QX99194

CLEANSTART-2026-RA63757

CLEANSTART-2026-RF40424

CLEANSTART-2026-SG88217

CLEANSTART-2026-UA95882

CLEANSTART-2026-WI17406

CLEANSTART-2026-XH31600

CLEANSTART-2026-YM75307

CVE-2025-46817

DLA-4325-1

DSA-6020-1

DSA-6022-1

GHSA-M8FJ-85CG-7VHP

INFSA-2025_19237

INFSA-2025_19238

INFSA-2025_19345

INFSA-2025_20926

INFSA-2025_20955

INFSA-2025_21916

MGASA-2025-0307

OESA-2025-2389

OESA-2025-2390

OESA-2025-2450

OESA-2025-2451

OESA-2025-2452

OESA-2025-2453

OPENSUSE-SU-2025:15600-1

OPENSUSE-SU-2025:15604-1

OPENSUSE-SU-2025:20121-1

OPENSUSE-SU-2026:20003-1

RHSA-2025:18931

RHSA-2025:18996

RHSA-2025:18997

RHSA-2025:19086

RHSA-2025:19237

RHSA-2025:19238

RHSA-2025:19239

RHSA-2025:19318

RHSA-2025:19345

RHSA-2025:19399

RHSA-2025:19675

RHSA-2025:20926

RHSA-2025:20955

RHSA-2025:21916

RHSA-2025:21936

RHSA-2025_19237

RHSA-2025_19238

RHSA-2025_19345

RHSA-2025_20926

RHSA-2025_20955

RHSA-2025_21916

SUSE-SU-2025:03499-1

SUSE-SU-2025:03500-1

SUSE-SU-2025:03501-1

SUSE-SU-2025:03502-1

SUSE-SU-2025:03505-1

SUSE-SU-2025:03506-1

SUSE-SU-2025:03507-1

SUSE-SU-2025_03499-1

SUSE-SU-2025_03500-1

SUSE-SU-2025_03501-1

SUSE-SU-2025_03502-1

SUSE-SU-2025_03505-1

SUSE-SU-2025_03506-1

SUSE-SU-2025_03507-1

SUSE-SU-2026:20022-1

USN-7893-1

Produtos afetados

Alt Linux

Almalinux

Centos

Debian

Linuxmint

Red Hat

Red Os

Redis

Rocky Linux

Suse

Ubuntu

Referências · 290

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46817.json · Exploit
• 🔥 https://github.com/dwisiswant0/CVE-2025-46817 · Exploit
• https://github.com/redis/redis/security/advisories/GHSA-m8fj-85cg-7vhp · Aviso do Fabricante
• https://github.com/redis/redis/releases/tag/8.2.2 · Nota
• https://github.com/redis/redis/commit/fc9abc775e308374f667fdf3e723ef4b7eb0e3ca · Correção
• https://github.com/redis/redis/releases/tag/7.2.11 · Nota
• https://github.com/redis/redis/releases/tag/7.2.12 · Nota
• https://github.com/valkey-io/valkey/commit/6dd003e88feace83e55491f32376f6927896e31e · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RA63757 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-DI78859 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-AV02020 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-JR53141.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-AF35851.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EL98096 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MZ27698.json · Nota