CVE-2024-51480

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-51480
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-51480.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-51480
Aliases
  • GHSA-73x6-fqww-x8rg
Published
2025-01-08T15:20:28.407Z
Modified
2025-12-01T17:46:27.212932Z
Severity
  • 7.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
RedisTimeSeries Integer Overflow Remote Code Execution Vulnerability
Details

RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MREVRANGE by an authenticated user, using specially crafted command arguments may cause an integer overflow, a subsequent heap overflow, and potentially lead to remote code execution. This vulnerability is fixed in 1.6.20, 1.8.15, 1.10.15, and 1.12.3.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-122",
        "CWE-190"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/51xxx/CVE-2024-51480.json"
}
References

Affected packages

Git / github.com/redistimeseries/redistimeseries

Affected ranges

Type
GIT
Repo
https://github.com/redistimeseries/redistimeseries
Events
Introduced
5c6f1aea3a08bad10faa235ced317840b420584a
Fixed
03924e04eeb3aff4ee3f0b6c1f2aff65c084cf7d
Database specific 
{
    "versions": [
        {
            "introduced": "1.8.0"
        },
        {
            "fixed": "1.8.15"
        }
    ]
}
Type
GIT
Repo
https://github.com/redistimeseries/redistimeseries
Events
Introduced
da0bce770319165c9322de3c339a444d3b78e8b7
Fixed
d956b4715f368371ef85f7106d3f6791d2ac123d
Database specific 
{
    "versions": [
        {
            "introduced": "1.10.0"
        },
        {
            "fixed": "1.10.15"
        }
    ]
}
Type
GIT
Repo
https://github.com/redistimeseries/redistimeseries
Events
Introduced
e6fb68cb8d6f624ba130aba93a8a688a43223041
Fixed
22857975a1b066de30b77421549dea9f863aa529
Database specific 
{
    "versions": [
        {
            "introduced": "1.12.0"
        },
        {
            "fixed": "1.12.3"
        }
    ]
}

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "1.0.0"
            },
            {
                "fixed": "1.6.20"
            }
        ]
    }
]