CVE-2024-48342

Name of the Vulnerable Software and Affected Versions Redis versions 2.60 through 7.41

Description The issue allows for a denial of service due to memory consumption when authentication is enabled. This occurs because the client-output-buffer-limit normal setting has no limit.

Recommendations For Redis versions 2.60 through 7.41, consider setting a limit for the client-output-buffer-limit normal to prevent excessive memory consumption. At the moment, there is no information about a newer version that contains a fix for this vulnerability.