Logo
vulnerabilityCVE-2024-31449
Name
CVE-2024-31449
Source
NVD ( link)Debian ( link)
Description
Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
redis
Exploitable

Vulnerability Ratings#


7
CVSSv31
8.8
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
7.2.14
Not Affected
buildroot
master
8.8.0
Not Affected
openwrt
openwrt-25.12
6.2.14-r1
Exploitable
yocto
kirkstone
7.0.15
Not Affected
yocto
master
8.0.6
Not Affected
yocto
scarthgap
7.2.12
Not Affected