CVE-2024-31227 - Redis ACL Denial of Service Vulnerability

1 week ago 6
ARTICLE AD BOX
CVE ID : CVE-2024-31227
Published : Oct. 7, 2024, 8:15 p.m. | 24 minutes ago
Description : Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Severity: 4.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Read Entire Article