CVE-2024-51741

Name of the Vulnerable Software and Affected Versions Redis versions prior to 7.2.7 Redis versions prior to 7.4.2

Description The issue is related to an open-source, in-memory database that persists on disk. An authenticated user with sufficient privileges can create a malformed ACL selector, which, when accessed, triggers a server panic and subsequent denial of service.

Recommendations For versions prior to 7.2.7, update to Redis 7.2.7 or later to resolve the issue. For versions prior to 7.4.2, update to Redis 7.4.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the ACL selector feature until a patch is available.