CVE-2025-48367
Redis DoS Vulnerability due to bad connection error handling
Résumé
Redis DoS Vulnerability due to bad connection error handling
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
keydb
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.2.19"},{"introduced":"7.0.0"},{"fixed":"7.2.10"},{"introduced":"8.0.0"},{"fixed":"8.0.3"},{"introduced":"7.4.0"},{"fixed":"7.4.5"}]}]
Bitnami
redis
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.2.19"},{"introduced":"7.0.0"},{"fixed":"7.2.10"},{"introduced":"8.0.0"},{"fixed":"8.0.3"},{"introduced":"7.4.0"},{"fixed":"7.4.5"}]}]
Bitnami
valkey
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.2.10"},{"introduced":"7.3.0"},{"fixed":"8.0.4"},{"introduced":"8.1.0"},{"fixed":"8.1.3"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2025-48367 valkey Corrigé dans: 7.2.11-r0
- Debian DEBIAN-CVE-2025-48367 redict Corrigé dans: 7.3.5+ds-1
- Ubuntu UBUNTU-CVE-2025-48367 redis
Références
- advisory github.com
- patch github.com
- web github.com
- web github.com
- web github.com
- web github.com
- web nvd.nist.gov