Skip to content
OpenAdvisories
High DLA-4025-1 1 CVE

redis - security update

Published Jan 20, 2025 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 11 redis 5:6.0.16-1+deb11u5

Vulnerabilities 1

  • High 7.0
    CVE-2024-46981 Public exploit

    Redis' Lua library commands may lead to remote code execution

    Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17…