PT-2025-1017 · Redis+10 · Redis+10
P33Zy
·
Published
2024-07-18
·
Updated
2025-10-21
·
CVE-2024-46981
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Redis versions prior to 7.4.2
Redis versions prior to 7.2.7
Redis versions prior to 6.2.17
Description
The issue is related to a use-after-free vulnerability in Redis, which can be exploited by manipulating the garbage collector using a specially crafted Lua script. This can potentially lead to remote code execution. An authenticated user may use this script to manipulate the garbage collector. The problem is fixed in versions 7.4.2, 7.2.7, and 6.2.17.
Recommendations
For versions prior to 7.4.2, update to version 7.4.2 or later to resolve the issue.
For versions prior to 7.2.7, update to version 7.2.7 or later to resolve the issue.
For versions prior to 6.2.17, update to version 6.2.17 or later to resolve the issue.
As a temporary workaround, consider preventing users from executing Lua scripts by restricting
EVAL and EVALSHA commands using ACL to minimize the risk of exploitation.Exploit
Fix
RCE
Integer Overflow
Heap Based Buffer Overflow
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Red Hat
Red Os
Redis
Rocky Linux
Suse
Ubuntu