{"id":"CVE-2024-51741","aliases":["ALPINE-CVE-2024-51741","ALSA-2025:0692","AZL-55283","BELL-CVE-2024-51741","BIT-keydb-2024-51741","BIT-redis-2024-51741","BIT-valkey-2024-51741","DEBIAN-CVE-2024-51741","DSA-5856-1","EUVD-2024-45795","GHSA-prpq-rh5h-46g9","MGASA-2025-0033","RHSA-2025:0692","SUSE-SU-2025:0160-1","SUSE-SU-2025:0161-1","SUSE-SU-2025:0163-1","UBUNTU-CVE-2024-51741","USN-7321-1","USN-7359-1","openSUSE-SU-2025:14638-1","openSUSE-SU-2025:15293-1"],"status":"published","title":"Redis allows denial-of-service due to malformed ACL selectors","description":"Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.","severity":{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00303,"percentile":0.23299,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2025-01-06T21:20:19Z","modified":"2026-11-03T06:32:10Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"redict","fixed_in":["7.3.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"redict","fixed_in":["7.3.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"redict","fixed_in":["7.3.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"redict","fixed_in":["7.3.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"redict","fixed_in":["7.3.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"redis","fixed_in":["7.0.15-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"redis","fixed_in":["7.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"redis","fixed_in":["7.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"redis","fixed_in":["7.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"redis","fixed_in":["7.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"redis","fixed_in":["7.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"redis","fixed_in":["7.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"valkey","fixed_in":["7.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"valkey","fixed_in":["7.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"valkey","fixed_in":["7.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"valkey","fixed_in":["7.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"valkey","fixed_in":["7.2.8-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"valkey","fixed_in":["8.0.2-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"redis","fixed_in":["7.0.15-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"redis","fixed_in":["7.2.7-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"redis","fixed_in":["7.2.8","7.4.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"valkey","fixed_in":["8.0.2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"redict","fixed_in":["7.3.2+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"redis","fixed_in":["5:7.0.15-1~deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"redis","fixed_in":["5:7.0.15-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"redis","fixed_in":["5:7.0.15-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"valkey","fixed_in":["8.0.2+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"valkey","fixed_in":["8.0.2+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"redis","fixed_in":["5:7.0.15-1ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"valkey","fixed_in":["7.2.8+dfsg1-0ubuntu0.24.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.0.15-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.8-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.7-1.module_el9.5.0+134+2e645600"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.7-1.module_el9.5.0+134+2e645600"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.7-1.module_el9.5.0+134+2e645600"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:3","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9-r0"},{"fixed":"7.0.15-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9-r0"},{"fixed":"7.2.7-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"keydb","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"redis","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.2.8"},{"introduced":"7.4.0"},{"fixed":"7.4.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"valkey","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.0.2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.2+ds-1"}]}],"versions":["7.3.0+ds-1","7.3.0+ds-2","7.3.0+ds-3","7.3.0+ds-3~bpo12+1","7.3.1+ds-1","7.3.2+ds-1~bpo12+1"]},{"source":"osv","ecosystem":"Debian:12","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1~deb12u3"}]}],"versions":["5:7.0.11-1","5:7.0.11-1+deb12u1","5:7.0.12-1","5:7.0.12-2","5:7.0.13-1","5:7.0.13-2","5:7.0.14-1","5:7.0.14-2","5:7.0.15-1~deb12u1","5:7.0.15-1~deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1~deb12u3"}]}],"versions":["5:7.0.11-1","5:7.0.11-1+deb12u1","5:7.0.12-1","5:7.0.12-2","5:7.0.13-1","5:7.0.13-2","5:7.0.14-1","5:7.0.14-2","5:7.0.15-1~deb12u1","5:7.0.15-1~deb12u2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.14-1.2.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.7-1.module+el9.5.0+22705+3d861c1c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.7-1.module+el9.5.0+22705+3d861c1c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.7-1.module+el9.5.0+22705+3d861c1c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.7-1.module+el9.5.0+22705+3d861c1c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.7-1.module+el9.5.0+22705+3d861c1c"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150500.3.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150500.3.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150500.3.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150500.3.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150600.8.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150600.8.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.4-150600.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.4-150600.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1ubuntu0.24.04.1"}]}],"versions":["5:7.0.12-1","5:7.0.14-1","5:7.0.14-2","5:7.0.15-1","5:7.0.15-1build1","5:7.0.15-1build2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.8+dfsg1-0ubuntu0.24.04.2"}]}],"versions":["7.2.5+dfsg1-2ubuntu4~24.04.1","7.2.7+dfsg1-0ubuntu0.24.04.1","7.2.8+dfsg1-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.2+ds-1","7.3.5+ds-1","7.3.5+ds-1ubuntu0.1","7.3.5+ds-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.6+ds-1","7.3.6+ds-2","7.3.6+ds-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.5+ds-1","7.3.5+ds-1ubuntu0.1","7.3.6+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.4-2ubuntu0.2+esm4"}]}],"versions":["2:2.6.13-1","2:2.6.16-3","2:2.8.0-1","2:2.8.2-1","2:2.8.4-2","2:2.8.4-2ubuntu0.2","2:2.8.4-2ubuntu0.2+esm1","2:2.8.4-2ubuntu0.2+esm2","2:2.8.4-2ubuntu0.2+esm3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.6-1ubuntu0.4+esm3"}]}],"versions":["2:3.0.3-3","2:3.0.5-1","2:3.0.5-2","2:3.0.5-3","2:3.0.5-4","2:3.0.6-1","2:3.0.6-1ubuntu0.2","2:3.0.6-1ubuntu0.3","2:3.0.6-1ubuntu0.4","2:3.0.6-1ubuntu0.4+esm1","2:3.0.6-1ubuntu0.4+esm2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:4.0.9-1ubuntu0.2+esm5"}]}],"versions":["4:4.0.1-7","4:4.0.2-6","4:4.0.2-9","5:4.0.5-1","5:4.0.6-1","5:4.0.6-2","5:4.0.7-1","5:4.0.8-1","5:4.0.8-2","5:4.0.9-1","5:4.0.9-1ubuntu0.1","5:4.0.9-1ubuntu0.2","5:4.0.9-1ubuntu0.2+esm2","5:4.0.9-1ubuntu0.2+esm3","5:4.0.9-1ubuntu0.2+esm4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.7-2ubuntu0.1+esm3"}]}],"versions":["5:5.0.5-2build1","5:5.0.6-1","5:5.0.7-1","5:5.0.7-2","5:5.0.7-2ubuntu0.1~esm1","5:5.0.7-2ubuntu0.1","5:5.0.7-2ubuntu0.1+esm1","5:5.0.7-2ubuntu0.1+esm2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.16-1ubuntu1+esm2"}]}],"versions":["5:6.0.15-1","5:6.0.16-1","5:6.0.16-1build1","5:6.0.16-1ubuntu1","5:6.0.16-1ubuntu1+esm1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1ubuntu0.24.04.1"}]}],"versions":["5:7.0.12-1","5:7.0.14-1","5:7.0.14-2","5:7.0.15-1","5:7.0.15-1build1","5:7.0.15-1build2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.8+dfsg1-0ubuntu0.24.04.2"}]}],"versions":["7.2.5+dfsg1-2ubuntu4~24.04.1","7.2.7+dfsg1-0ubuntu0.24.04.1","7.2.8+dfsg1-0ubuntu0.24.04.1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2-1.1"}]}],"bundled":7}],"products":[{"vendor":"redis","product":"redis"}],"references":[{"url":"https://github.com/redis/redis/security/advisories/GHSA-prpq-rh5h-46g9","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","article","report"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-51741","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0692","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-46981","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-51741","tags":["report"]},{"url":"https://bugzilla.redhat.com/2336004","tags":["report"]},{"url":"https://bugzilla.redhat.com/2336007","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-0692.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-51741","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-51741","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/advisories/BELL-SA-2025-1","tags":["advisory"]},{"url":"https://codeberg.org/redict/redict/releases/tag/7.3.2","tags":["web"]},{"url":"https://github.com/valkey-io/valkey/releases/tag/8.0.2","tags":["web"]},{"url":"https://redict.io/posts/2025-01-08-redict-7.3.2-released","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/51xxx/CVE-2024-51741.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-51741","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0033.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33924","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HQU52SRIF5TB4GL3LJOHKX2MUHXNHH6/","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2025/msg00018.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2336004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2336007","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0692.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-46981","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46981","tags":["advisory"]},{"url":"https://github.com/redis/redis/releases/tag/6.2.17","tags":["article"]},{"url":"https://github.com/redis/redis/releases/tag/7.2.7","tags":["article"]},{"url":"https://github.com/redis/redis/releases/tag/7.4.2","tags":["article"]},{"url":"https://github.com/redis/redis/security/advisories/GHSA-39h2-x6c4-6w4c","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-51741","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250160-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1235386","tags":["report"]},{"url":"https://bugzilla.suse.com/1235387","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-51741","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250161-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250163-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-51741","tags":["report"]},{"url":"https://github.com/redis/redis/commit/15e212bf69de28d2b4585aa79cc2a40f49e4a94d","tags":["report"]},{"url":"https://codeberg.org/redict/redict/issues/60","tags":["report"]},{"url":"https://github.com/valkey-io/valkey/commit/7977c55ac9bea7d1443c32ef5ec020767c086d3a","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7321-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7359-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-31228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-46981","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TGZSR4XROA2QNSJN3D6QEMR3R6FSTFZQ/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27151","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-51741","title":"Redis allows denial-of-service due to malformed ACL selectors","description":"Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.","status":"published","published":"2025-01-06T21:20:19.772Z","modified":"2025-01-06T21:39:28.426Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:34:01.972857Z"}],"euvd":[{"id":"EUVD-2024-45795","description":"Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.","status":"published","published":"2025-01-06T21:20:19Z","modified":"2025-01-06T21:39:28Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:04:25.174818Z"}],"nvd":[{"id":"CVE-2024-51741","description":"Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.","status":"published","published":"2025-01-06T22:15:09.827Z","modified":"2026-06-17T08:06:13.863Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:10:41.838321Z"}],"osv":[{"id":"ALPINE-CVE-2024-51741","description":"Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.","status":"published","published":"2025-01-06T22:15:09.827Z","modified":"2026-11-03T06:32:10.433441221Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"BELL-CVE-2024-51741","status":"published","published":"2025-01-13T17:59:33.426245Z","modified":"2026-01-26T09:42:41.59498Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:20.963569Z"},{"id":"CVE-2024-51741","title":"Redis allows denial-of-service due to malformed ACL selectors","description":"Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.","status":"published","published":"2025-01-06T21:20:19.772Z","modified":"2026-10-28T02:30:41.300650846Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:44:44.032344Z"},{"id":"DEBIAN-CVE-2024-51741","description":"Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.","status":"published","published":"2025-01-06T22:15:09.827Z","modified":"2026-11-02T12:02:57.154611363Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:44.117337Z"},{"id":"RHSA-2025:0692","title":"Red Hat Security Advisory: redis:7 security update","status":"published","published":"2025-01-28T10:10:04Z","modified":"2026-10-16T10:06:06Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"UBUNTU-CVE-2024-51741","description":"Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.","status":"published","published":"2025-01-06T22:15:00Z","modified":"2026-10-17T12:57:25.069034882Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:11.182485Z"},{"id":"ALSA-2025:0692","title":"Important: redis:7 security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  \n\nSecurity Fix(es):  \n\n  * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981)\n  * redis: Redis allows denial-of-service due to malformed ACL selectors (CVE-2024-51741)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-01-27T00:00:00Z","modified":"2026-10-29T11:32:12.219089123Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-55283","title":"CVE-2024-51741 affecting package valkey for versions less than 8.0.2-1","description":"Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.","status":"published","published":"2025-01-06T22:15:09Z","modified":"2026-04-21T04:54:43.498028Z","updated_at":"2026-11-02T15:28:06.879785Z"},{"id":"BIT-keydb-2024-51741","title":"Redis allows denial-of-service due to malformed ACL selectors","description":"Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.","status":"published","published":"2025-01-08T07:13:13.917Z","modified":"2026-09-08T08:48:07.231425896Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-redis-2024-51741","title":"Redis allows denial-of-service due to malformed ACL selectors","description":"Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.","status":"published","published":"2025-01-08T07:20:15.238Z","modified":"2026-09-08T08:48:19.18161871Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"BIT-valkey-2024-51741","title":"Redis allows denial-of-service due to malformed ACL selectors","description":"Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.","status":"published","published":"2025-01-08T07:22:23.019Z","modified":"2026-09-08T08:48:21.000808772Z","updated_at":"2026-11-02T15:28:36.104787Z"},{"id":"DSA-5856-1","title":"redis - security update","status":"published","published":"2025-01-30T00:00:00Z","modified":"2026-03-09T02:10:23.706775Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2025-0033","title":"Updated redis packages fix security vulnerabilities","description":"Redis' Lua library commands may lead to remote code execution.\n(CVE-2024-46981)\nRedis allows denial-of-service due to malformed ACL selectors.\n(CVE-2024-51741)\n","status":"published","published":"2025-02-03T19:58:04Z","modified":"2026-04-16T04:43:15.371632837Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2025:14638-1","title":"valkey-8.0.2-1.1 on GA media","description":"These are all security issues fixed in the valkey-8.0.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-12T00:00:00Z","modified":"2026-02-04T03:08:05.323081Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:15293-1","title":"redis-8.0.2-1.1 on GA media","description":"These are all security issues fixed in the redis-8.0.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:36.205134Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-SU-2025:0160-1","title":"Security update for redis7","description":"This update for redis7 fixes the following issues:\n\n- CVE-2024-51741: Fixed a bug where malformed ACL selectors can trigger a server panic when accessed. (bsc#1235386)\n- CVE-2024-46981: Fixed a bug where lua scripts can be used to manipulate the garbage collector, leading to remote code execution. (bsc#1235387)\n","status":"published","published":"2025-01-17T14:38:37Z","modified":"2026-02-04T04:19:33.771925Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:0161-1","title":"Security update for redis7","description":"This update for redis7 fixes the following issues:\n\n- CVE-2024-51741: Fixed a bug where malformed ACL selectors can trigger a server panic when accessed. (bsc#1235386)\n- CVE-2024-46981: Fixed a bug where lua scripts can be used to manipulate the garbage collector, leading to remote code execution. (bsc#1235387)\n","status":"published","published":"2025-01-17T14:38:46Z","modified":"2026-02-04T04:31:03.993985Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:0163-1","title":"Security update for redis","description":"This update for redis fixes the following issues:\n\n- CVE-2024-51741: Fixed a bug where malformed ACL selectors can trigger a server panic when accessed. (bsc#1235386)\n- CVE-2024-46981: Fixed a bug where lua scripts can be used to manipulate the garbage collector, leading to remote code execution. (bsc#1235387)\n","status":"published","published":"2025-01-17T14:39:59Z","modified":"2026-02-04T02:52:09.702308Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"USN-7321-1","title":"redis vulnerabilities","description":"It was discovered that Redis incorrectly handled certain memory operations\nduring pattern matching. An attacker could possibly use this issue to cause\na denial of service. (CVE-2024-31228)\n\nIt was discovered that Redis incorrectly handled certain specially crafted\nLua scripts. An attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. (CVE-2024-46981)\n\nIt was discovered that Redis incorrectly handled some malformed ACL\nselectors. An attacker could possibly use this issue to cause a denial of\nservice. This issue only affected Ubuntu 24.10 and Ubuntu 24.04 LTS.\n(CVE-2024-51741)\n","status":"published","published":"2025-03-05T14:35:16Z","modified":"2026-06-25T13:31:45.95474603Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7359-1","title":"valkey vulnerabilities","description":"It was discovered that Valkey did not properly handle memory\ncleanup. An attacker could possibly use this issue to execute\narbitrary code. (CVE-2024-46981)\n\nIt was discovered that Valkey did not properly handle resource\naccess permissions. An authenticated attacker could possibly\nuse this issue to cause a denial of service. (CVE-2024-51741)\n","status":"published","published":"2025-03-19T15:05:25Z","modified":"2026-04-27T17:49:20.821389Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}