CVE-2025-48367
Redis DoS Vulnerability due to bad connection error handling
Summary
Redis DoS Vulnerability due to bad connection error handling
Original description
The description as published by the source.
Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
keydb
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.2.19"},{"introduced":"7.0.0"},{"fixed":"7.2.10"},{"introduced":"8.0.0"},{"fixed":"8.0.3"},{"introduced":"7.4.0"},{"fixed":"7.4.5"}]}]
Bitnami
redis
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.2.19"},{"introduced":"7.0.0"},{"fixed":"7.2.10"},{"introduced":"8.0.0"},{"fixed":"8.0.3"},{"introduced":"7.4.0"},{"fixed":"7.4.5"}]}]
Bitnami
valkey
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.2.10"},{"introduced":"7.3.0"},{"fixed":"8.0.4"},{"introduced":"8.1.0"},{"fixed":"8.1.3"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2025-48367 valkey Fixed in: 7.2.11-r0
- Debian DEBIAN-CVE-2025-48367 redict Fixed in: 7.3.5+ds-1
- Ubuntu UBUNTU-CVE-2025-48367 redis
References
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- web github.com
- web github.com
- web github.com
- web github.com