CVE-2024-51741 — Redis allows denial-of-service due to malformed ACL selectors

CVE-2024-51741

Redis allows denial-of-service due to malformed ACL selectors PUBLISHED

Description (CNA)

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.

Affected (CNA)

Vendor / product	Versions
redis / redis	affected >= 7.0.0, < 7.2.7; affected >= 7.4.0, < 7.4.2

CWE

CWE-20

References

https://github.com/redis/redis/security/advisories/GHSA-prpq-rh5h-46g9

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.