Logo
vulnerabilityCVE-2025-46817
Name
CVE-2025-46817
Source
NVD ( link)Debian ( link)
Description
Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
redis
Exploitable

Vulnerability Ratings#


7
CVSSv31
8.8
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
7.2.14
Not Affected
buildroot
master
8.8.0
Not Affected
openwrt
master
6.2.14-r1
Exploitable
yocto
kirkstone
7.0.15
Exploitable
yocto
master
8.0.6
Not Affected
yocto
scarthgap
7.2.12
Not Affected