Skip to content
OpenAdvisories
Critical USN-7824-2 1 CVE

redict vulnerability

Published Oct 16, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

USN-7824-1 fixed several vulnerabilities in Redis. This update provides
the corresponding update for Redict - a fork of Redis.

Original advisory details:

Benny Isaacs, Nir Brakha, and Sagi Tzadik discovered that Redis incorrectly
handled memory when running Lua scripts. An authenticated attacker could use
this vulnerability to trigger a use-after-free condition, and potentially
achieve remote code execution on the Redis server.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 25.10 redict 7.3.5+ds-1ubuntu0.1

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-49844 Public exploit Scanner template EPSS 83%

    Redis Lua Use-After-Free may lead to remote code execution

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code exe…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2025-49844