Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade redis-docUpgrade redis-develUpgrade redis | Jul 31, 2025 | Jul 28, 2025 |
| Alpine Linux | — | Upgrade redictUpgrade redisUpgrade valkey | Aug 8, 2025 | Jul 7, 2025 |
| Amazon Linux Ami 2 | — | Upgrade redis-debuginfoUpgrade redis-docUpgrade redis-develUpgrade redis | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade redis6-develUpgrade redis6-docUpgrade valkey-develUpgrade redis6Upgrade redis6-debugsourceUpgrade redis6-debuginfoUpgrade valkeyUpgrade valkey-debugsourceUpgrade valkey-debuginfo | Jul 11, 2025 | Jul 7, 2025 |
| Debian | — | Upgrade redisUpgrade valkey | Jul 9, 2025 | Jul 7, 2025 |
| Freebsd | — | Upgrade redis74Upgrade redisUpgrade valkeyUpgrade redis72Upgrade redis62 | Jul 8, 2025 | Jul 7, 2025 |
| Gentoo Linux | — | Upgrade dev-db/redis.Upgrade dev-db/redict. | Nov 25, 2025 | Nov 24, 2025 |
| Oracle_linux | — | Upgrade redis-docUpgrade valkey-develUpgrade redis-develUpgrade redisUpgrade valkey | Jul 22, 2025 | Jul 7, 2025 |
| Redhat_linux | — | Upgrade redis-develUpgrade valkey-debuginfoUpgrade valkeyUpgrade valkey-debugsourceUpgrade redis-debugsourceUpgrade redis-debuginfoUpgrade redis-docUpgrade valkey-develUpgrade redis | Jul 15, 2025 | Jul 7, 2025 |
| Redislabs Redis | — | Upgrade RedisLabs Redis to version 7.4.5Upgrade RedisLabs Redis to version 7.2.10Upgrade RedisLabs Redis to version 6.2.19Upgrade RedisLabs Redis to version 8.0.3 | Apr 17, 2026 | Jul 7, 2025 |
| Rocky_linux | — | Upgrade valkeyUpgrade valkey-debuginfoUpgrade redisUpgrade redis-develUpgrade valkey-debugsourceUpgrade redis-debuginfoUpgrade valkey-develUpgrade redis-debugsource | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade valkeyUpgrade redis7Upgrade valkey-compat-redisUpgrade valkey-develUpgrade redis | Dec 5, 2025 | Jul 23, 2025 |
| Ubuntu | — | Upgrade valkey | Mar 19, 2026 | Jul 7, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jul 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub