REDHAT-BUG-2466828: High severity Redis redis-server vulnerability
Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redis-serverto a version that resolves this vulnerability.Fixed in 8.6.3 - Compensating control
Restrict access to the Redis RESTORE command using ACL rules so only trusted/authorized clients can execute RESTORE.
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2466828?
The severity of REDHAT-BUG-2466828 is high, rated at 7.
How do I fix REDHAT-BUG-2466828?
To fix REDHAT-BUG-2466828, upgrade to Redis versions greater than 8.6.3 where the issue is resolved.
What is the risk associated with REDHAT-BUG-2466828?
The risk associated with REDHAT-BUG-2466828 is a potential exploitation by an authenticated attacker leading to invalid memory access.
What versions of Redis are affected by REDHAT-BUG-2466828?
REDHAT-BUG-2466828 affects Redis versions up to 8.6.3.
What command is improperly validated in REDHAT-BUG-2466828?
The RESTORE command is improperly validated in REDHAT-BUG-2466828.