REDHAT-BUG-2317053: Medium severity Redis redis vulnerability
Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2317053?
The severity of REDHAT-BUG-2317053 is classified as critical due to the potential for denial of service.
How do I fix REDHAT-BUG-2317053?
To fix REDHAT-BUG-2317053, upgrade to Redis versions 7.2.6 or 7.4.1 or later.
What versions of Redis are affected by REDHAT-BUG-2317053?
Redis versions prior to 7.2.6 and 7.4.1 are affected by REDHAT-BUG-2317053.
What causes the issue in REDHAT-BUG-2317053?
The issue in REDHAT-BUG-2317053 is caused by an authenticated user creating a malformed ACL selector that leads to a server panic.
What is the potential impact of REDHAT-BUG-2317053?
The potential impact of REDHAT-BUG-2317053 is a denial of service, making the Redis server unresponsive.