Logo
vulnerabilityCVE-2024-31227
Name
CVE-2024-31227
Source
NVD ( link)Debian ( link)
Description
Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
redis
Exploitable
redis
Exploitable

Vulnerability Ratings#


4.4
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
7.2.14
Not Affected
buildroot
master
8.8.0
Not Affected
openwrt
master
6.2.14-r1
Not Affected
openwrt
openwrt-25.12
6.2.14-r1
Not Affected
yocto
master
8.0.6
Not Affected
yocto
scarthgap
7.2.12
Not Affected