Servers and applications
CVE-2024-31449
Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to…
- Severity
- High 8.8
- Published
- 7 Oct 2024
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 6.2.16, 7.2.6
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
RedisServers and applications · cpe:a:redis:redis |
|