Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade redis-develUpgrade redis-docUpgrade redis | Jan 30, 2025 | Jan 6, 2025 |
| Alpine Linux | — | Upgrade redisUpgrade valkeyUpgrade redict | Aug 8, 2025 | Jan 6, 2025 |
| Debian | — | Upgrade valkeyUpgrade redis | Feb 3, 2025 | Jan 6, 2025 |
| Freebsd | — | Upgrade valkeyUpgrade redis72Upgrade redisUpgrade redis-devel | Jan 11, 2025 | Jan 10, 2025 |
| Gentoo Linux | — | Upgrade dev-db/redis.Upgrade dev-db/redict. | Nov 25, 2025 | Nov 24, 2025 |
| Oracle_linux | — | Upgrade redis-develUpgrade redisUpgrade redis-doc | Jan 27, 2025 | Jan 6, 2025 |
| Redhat_linux | — | Upgrade redis-develUpgrade redis-debuginfoUpgrade redis-debugsourceUpgrade redis-docUpgrade redis | Jan 30, 2025 | Jan 6, 2025 |
| Redislabs Redis | — | Upgrade RedisLabs Redis to version 7.4.2Upgrade RedisLabs Redis to version 7.2.7 | Apr 17, 2026 | Jan 6, 2025 |
| Rocky_linux | — | Upgrade redis-debuginfoUpgrade redis-debugsourceUpgrade redisUpgrade redis-devel | Mar 18, 2025 | Jan 6, 2025 |
| Ubuntu | — | Upgrade redis-toolsUpgrade redis-serverUpgrade valkey-serverUpgrade valkey-toolsUpgrade valkey-sentinelUpgrade valkey-redis-compat | Mar 6, 2025 | Jan 6, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jan 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub