Skip to content
OpenAdvisories
High USN-7359-1 2 CVEs

valkey vulnerabilities

Published Mar 19, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Valkey did not properly handle memory
cleanup. An attacker could possibly use this issue to execute
arbitrary code. (CVE-2024-46981)

It was discovered that Valkey did not properly handle resource
access permissions. An authenticated attacker could possibly
use this issue to cause a denial of service. (CVE-2024-51741)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 24.04 LTS 24.04:LTS valkey 7.2.8+dfsg1-0ubuntu0.24.04.2

Vulnerabilities 2

  • High 7.0
    CVE-2024-46981 Public exploit

    Redis' Lua library commands may lead to remote code execution

    Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  • Medium 4.4
    CVE-2024-51741

    Redis allows denial-of-service due to malformed ACL selectors

    Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2024-46981
  • report
    https://ubuntu.com/security/CVE-2024-51741