Name
CVE-2025-48367
Description
Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.
CWEs
Published Date
Updated Date
Workaround
-
Advisories
https://github.com/redis/redis/releases/tag/6.2.19Release Notes
https://github.com/redis/redis/releases/tag/7.2.10Release Notes
https://github.com/redis/redis/releases/tag/7.4.5Release Notes
https://github.com/redis/redis/releases/tag/8.0.3Release Notes
https://github.com/redis/redis/security/advisories/GHSA-4q32-c38c-pwgqThird Party Advisory
Analysis#
Vulnerability Ratings#
7.5
CVSSv31
NaN
other