Servers and applications
CVE-2025-21605
Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow…
- Severity
- High 7.5
- Published
- 23 Apr 2025
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 6.2.18, 7.2.8, 7.4.3
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
RedisServers and applications · cpe:a:redis:redis |
|