CVE-2024-51741

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2024-51741

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-51741.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2024-51741

Aliases

Related

Published

2025-01-06T22:15:09Z

Modified

2025-01-19T01:07:00.120600Z

Summary

[none]

Details

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.

References

Affected packages

Alpine:v3.18 / redis

Package

Name: redis
Purl: pkg:apk/alpine/redis?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.0.15-r2

Affected versions

2.*

2.4.14-r0

2.4.14-r1

2.4.14-r2

2.4.16-r0

2.6.16-r0

2.6.17-r0

2.8.9-r0

2.8.9-r1

2.8.9-r2

2.8.10-r0

2.8.11-r0

2.8.12-r0

2.8.13-r0

2.8.14-r0

2.8.17-r0

2.8.19-r0

3.*

3.0.0-r0

3.0.0-r1

3.0.1-r0

3.0.2-r0

3.0.3-r0

3.0.4-r0

3.0.5-r0

3.0.5-r1

3.0.6-r0

3.0.7-r0

3.0.7-r1

3.2.0-r0

3.2.1-r0

3.2.3-r0

3.2.4-r0

3.2.5-r0

3.2.7-r0

3.2.8-r0

3.2.9-r0

4.*

4.0.2-r0

4.0.2-r1

4.0.5-r0

4.0.6-r0

4.0.8-r0

4.0.9-r0

4.0.9-r1

4.0.9-r2

4.0.10-r0

4.0.10-r1

4.0.11-r0

4.0.12-r0

4.0.13-r0

5.*

5.0.4-r0

5.0.5-r0

5.0.7-r0

5.0.8-r0

5.0.9-r0

6.*

6.0.1-r0

6.0.4-r0

6.0.5-r0

6.0.9-r0

6.0.10-r0

6.2.0-r0

6.2.1-r0

6.2.2-r0

6.2.3-r0

6.2.4-r0

6.2.5-r0

6.2.6-r0

6.2.7-r0

7.*

7.0.0-r0

7.0.2-r0

7.0.3-r0

7.0.4-r0

7.0.4-r1

7.0.4-r2

7.0.5-r0

7.0.6-r0

7.0.7-r0

7.0.8-r0

7.0.9-r0

7.0.10-r0

7.0.10-r1

7.0.11-r0

7.0.12-r0

7.0.13-r0

7.0.14-r0

7.0.15-r0

7.0.15-r1

Alpine:v3.19 / redis

Package

Name: redis
Purl: pkg:apk/alpine/redis?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.2.7-r0

Affected versions

2.*

2.4.14-r0

2.4.14-r1

2.4.14-r2

2.4.16-r0

2.6.16-r0

2.6.17-r0

2.8.9-r0

2.8.9-r1

2.8.9-r2

2.8.10-r0

2.8.11-r0

2.8.12-r0

2.8.13-r0

2.8.14-r0

2.8.17-r0

2.8.19-r0

3.*

3.0.0-r0

3.0.0-r1

3.0.1-r0

3.0.2-r0

3.0.3-r0

3.0.4-r0

3.0.5-r0

3.0.5-r1

3.0.6-r0

3.0.7-r0

3.0.7-r1

3.2.0-r0

3.2.1-r0

3.2.3-r0

3.2.4-r0

3.2.5-r0

3.2.7-r0

3.2.8-r0

3.2.9-r0

4.*

4.0.2-r0

4.0.2-r1

4.0.5-r0

4.0.6-r0

4.0.8-r0

4.0.9-r0

4.0.9-r1

4.0.9-r2

4.0.10-r0

4.0.10-r1

4.0.11-r0

4.0.12-r0

4.0.13-r0

5.*

5.0.4-r0

5.0.5-r0

5.0.7-r0

5.0.8-r0

5.0.9-r0

6.*

6.0.1-r0

6.0.4-r0

6.0.5-r0

6.0.9-r0

6.0.10-r0

6.2.0-r0

6.2.1-r0

6.2.2-r0

6.2.3-r0

6.2.4-r0

6.2.5-r0

6.2.6-r0

6.2.7-r0

7.*

7.0.0-r0

7.0.2-r0

7.0.3-r0

7.0.4-r0

7.0.4-r1

7.0.4-r2

7.0.5-r0

7.0.6-r0

7.0.7-r0

7.0.8-r0

7.0.9-r0

7.0.10-r0

7.0.10-r1

7.0.11-r0

7.0.12-r0

7.2.0-r0

7.2.1-r0

7.2.2-r0

7.2.3-r0

7.2.4-r0

7.2.4-r1

Alpine:v3.20 / valkey

Package

Name: valkey
Purl: pkg:apk/alpine/valkey?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.2.8-r0

Affected versions

7.*

7.2.5-r0

7.2.5-r1

7.2.5-r2

7.2.7-r0

Alpine:v3.21 / valkey

Package

Name: valkey
Purl: pkg:apk/alpine/valkey?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.2.8-r0

Affected versions

7.*

7.2.5-r0

7.2.5-r1

7.2.5-r2

7.2.7-r0

Debian:13 / redict

Package

Name: redict
Purl: pkg:deb/debian/redict?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.3.2+ds-1

Affected versions

7.*

7.3.0+ds-1

7.3.0+ds-2

7.3.0+ds-3~bpo12+1

7.3.0+ds-3

7.3.1+ds-1

7.3.2+ds-1~bpo12+1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / redis

Package

Name: redis
Purl: pkg:deb/debian/redis?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5:7.*

5:7.0.11-1

5:7.0.11-1+deb12u1

5:7.0.12-1

5:7.0.12-2

5:7.0.13-1

5:7.0.13-2

5:7.0.14-1

5:7.0.14-2

5:7.0.15-1~deb12u1

5:7.0.15-1~deb12u2

5:7.0.15-1

5:7.0.15-2

5:7.2~rc1-1

5:7.2-rc2-1

5:7.2-rc3-1

5:7.2.0-1

5:7.2.0-2

5:7.2.1-1

5:7.2.1-2

5:7.2.2-1

5:7.2.2-2

5:7.2.3-1

5:7.2.4-1

5:7.2.5-1

5:7.2.5-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / redis

Package

Name: redis
Purl: pkg:deb/debian/redis?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5:7.*

5:7.0.11-1

5:7.0.12-1

5:7.0.12-2

5:7.0.13-1

5:7.0.13-2

5:7.0.14-1

5:7.0.14-2

5:7.0.15-1~deb12u1

5:7.0.15-1~deb12u2

5:7.0.15-1

5:7.0.15-2

5:7.2~rc1-1

5:7.2-rc2-1

5:7.2-rc3-1

5:7.2.0-1

5:7.2.0-2

5:7.2.1-1

5:7.2.1-2

5:7.2.2-1

5:7.2.2-2

5:7.2.3-1

5:7.2.4-1

5:7.2.5-1

5:7.2.5-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / valkey

Package

Name: valkey
Purl: pkg:deb/debian/valkey?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.0.2+dfsg1-1

Affected versions

7.*

7.2.5+dfsg1-1

7.2.5+dfsg1-2

8.*

8.0.1+dfsg1-1~bpo12+1

8.0.1+dfsg1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}