CVE-2024-51741
Fixed in a distro release EPSS <1%CVSS 4.4
Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.
Products: Redis
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | redis | 7.2.7-1.module_el9.5.0+134+2e645600 |
| AlmaLinux 9 | redis-devel | 7.2.7-1.module_el9.5.0+134+2e645600 |
| AlmaLinux 9 | redis-doc | 7.2.7-1.module_el9.5.0+134+2e645600 |
| Alpine 3.18 | redis | 7.0.15-r2 |
| Alpine 3.19 | redis | 7.2.7-r0 |
| Alpine 3.20 | valkey | 7.2.8-r0 |
| Alpine 3.21 | valkey | 7.2.8-r0 |
| Alpine 3.22 | valkey | 7.2.8-r0 |
| Alpine 3.23 | valkey | 7.2.8-r0 |
| Alpine 3.24 | valkey | 7.2.8-r0 |
| Chainguard | py3-redis | 0 |
| Chainguard | py3.10-redis | 0 |
| Chainguard | py3.11-redis | 0 |
| Chainguard | py3.12-redis | 0 |
| Chainguard | py3.13-redis | 0 |
| Chainguard | redis-7.2 | 7.2.7-r0 |
| Chainguard | redis-7.2-bitnami-compat | 7.2.7-r0 |
| Chainguard | redis-7.2-iamguarded-compat | 7.2.12-r2 |
| Chainguard | redis-7.4 | 7.4.2-r0 |
| Chainguard | redis-7.4-bitnami-compat | 7.4.2-r0 |
| Chainguard | redis-benchmark-7.2 | 7.2.12-r2 |
| Chainguard | redis-benchmark-7.2 | 7.2.7-r0 |
| Chainguard | redis-benchmark-7.4 | 7.4.2-r0 |
| Chainguard | redis-cli-7.2 | 7.2.12-r2 |
| Chainguard | redis-cli-7.2 | 7.2.7-r0 |
| Chainguard | redis-cli-7.4 | 7.4.2-r0 |
| Chainguard | redis-cluster-7.2-bitnami-compat | 7.2.7-r0 |
| Chainguard | redis-cluster-7.2-iamguarded-compat | 7.2.12-r2 |
| Chainguard | redis-cluster-7.4-bitnami-compat | 7.4.2-r0 |
| Chainguard | redis-sentinel-7.2-bitnami-compat | 7.2.7-r0 |
| Chainguard | redis-sentinel-7.2-iamguarded-compat | 7.2.12-r2 |
| Chainguard | redis-sentinel-7.4-bitnami-compat | 7.4.2-r0 |
| Debian 12 | redis | 5:7.0.15-1~deb12u3 |
| Debian 13 | redis | 5:7.0.15-3 |
| Debian 13 | valkey | 8.0.2+dfsg1-1 |
| Debian 14 | redict | 7.3.2+ds-1 |
| Debian 14 | redis | 5:7.0.15-3 |
| Debian 14 | valkey | 8.0.2+dfsg1-1 |
| Red Hat Enterprise Linux 9 | redis | 0:7.2.7-1.module+el9.5.0+22705+3d861c1c |
| Red Hat Enterprise Linux 9 | redis-debuginfo | 0:7.2.7-1.module+el9.5.0+22705+3d861c1c |
| Red Hat Enterprise Linux 9 | redis-debugsource | 0:7.2.7-1.module+el9.5.0+22705+3d861c1c |
| Red Hat Enterprise Linux 9 | redis-devel | 0:7.2.7-1.module+el9.5.0+22705+3d861c1c |
| Red Hat Enterprise Linux 9 | redis-doc | 0:7.2.7-1.module+el9.5.0+22705+3d861c1c |
| Rocky Linux 9 | redis | 0:7.2.7-1.module+el9.5.0+30204+5d6debe1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | redis7 | 7.0.8-150500.3.15.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | redis7 | 7.0.8-150500.3.15.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP6 | redis | 7.2.4-150600.3.6.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP6 | redis7 | 7.0.8-150600.8.6.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | redis7 | 7.0.8-150500.3.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | redis7 | 7.0.8-150500.3.15.1 |
| Ubuntu 24.04 LTS | redis | 5:7.0.15-1ubuntu0.24.04.1 |
| Ubuntu 24.04 LTS | valkey | 7.2.8+dfsg1-0ubuntu0.24.04.2 |
| Ubuntu 25.10 | redict | no fix |
| Ubuntu 26.04 LTS | redict | no fix |
| Ubuntu 26.10 | redict | no fix |
| Ubuntu Pro 14.04 LTS | redis | 2:2.8.4-2ubuntu0.2+esm4 |
| Ubuntu Pro 16.04 LTS | redis | 2:3.0.6-1ubuntu0.4+esm3 |
| Ubuntu Pro 18.04 LTS | redis | 5:4.0.9-1ubuntu0.2+esm5 |
| Ubuntu Pro 20.04 LTS | redis | 5:5.0.7-2ubuntu0.1+esm3 |
| Ubuntu Pro 22.04 LTS | redis | 5:6.0.16-1ubuntu1+esm2 |
| Wolfi | redis-7.2 | 7.2.7-r0 |
| Wolfi | redis-7.4 | 7.4.2-r0 |
| Wolfi | redis-benchmark-7.2 | 7.2.12-r2 |
| Wolfi | redis-cli-7.2 | 7.2.12-r2 |
| openSUSE Leap 15.6 | redis | 7.2.4-150600.3.6.1 |
| openSUSE Leap 15.6 | redis7 | 7.0.8-150600.8.6.1 |
| openSUSE Tumbleweed | redis | 8.0.2-1.1 |
| openSUSE Tumbleweed | valkey | 8.0.2-1.1 |