High severity7.0NVD Advisory· Published Oct 7, 2024· Updated Jun 17, 2026

CVE-2024-31449

Description

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Redis/Redis6 versions
cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*range: >=2.8.18,<6.2.16
- cpe:2.3:a:redis:redis:7.4.0:-:*:*:*:*:*:*
- cpe:2.3:a:redis:redis:7.4.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:redis:redis:7.4.0:rc2:*:*:*:*:*:*
- (no CPE)range: all versions with Lua scripting, fixed in 6.2.16, 7.2.6, and 7.4.1
- (no CPE)range: >= 2.6, < 6.2.16
osv-coords49 versions
pkg:apk/chainguard/py3-redis pkg:apk/chainguard/py3.10-redis pkg:apk/chainguard/py3.11-redis pkg:apk/chainguard/py3.12-redis pkg:apk/chainguard/py3.13-redis pkg:apk/chainguard/redis-6.2 pkg:apk/chainguard/redis-6.2-bitnami-compat pkg:apk/chainguard/redis-7.2 pkg:apk/chainguard/redis-7.2-iamguarded-compat pkg:apk/chainguard/redis-7.4 pkg:apk/chainguard/redis-benchmark-6.2 pkg:apk/chainguard/redis-benchmark-7.2 pkg:apk/chainguard/redis-cli-6.2 pkg:apk/chainguard/redis-cli-7.2 pkg:apk/chainguard/redis-cluster-6.2-bitnami-compat pkg:apk/chainguard/redis-cluster-7.2-iamguarded-compat pkg:apk/chainguard/redis-sentinel-6.2-bitnami-compat pkg:apk/chainguard/redis-sentinel-7.2-iamguarded-compat pkg:apk/wolfi/redis-6.2 pkg:apk/wolfi/redis-7.2 pkg:apk/wolfi/redis-7.4 pkg:apk/wolfi/redis-benchmark-7.2 pkg:apk/wolfi/redis-cli-7.2 pkg:bitnami/keydb pkg:bitnami/redis pkg:bitnami/valkey pkg:rpm/almalinux/redis pkg:rpm/almalinux/redis-devel pkg:rpm/almalinux/redis-doc pkg:rpm/opensuse/redis&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/redis&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/redis&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/redis7&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/redis7&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/valkey&distro=openSUSE%20Tumbleweed pkg:rpm/suse/redis&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP5 pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6 pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/redis&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/redis&distro=SUSE%20Manager%20Server%204.3 pkg:rpm/suse/redis7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP5 pkg:rpm/suse/redis7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6
< 0+ 48 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 6.2.16-r0
- (no CPE)range: < 6.2.16-r0
- (no CPE)range: < 7.2.6-r0
- (no CPE)range: < 7.2.12-r2
- (no CPE)range: < 7.4.1-r0
- (no CPE)range: < 6.2.16-r0
- (no CPE)range: < 7.2.12-r2
- (no CPE)range: < 6.2.16-r0
- (no CPE)range: < 7.2.12-r2
- (no CPE)range: < 6.2.16-r0
- (no CPE)range: < 7.2.12-r2
- (no CPE)range: < 6.2.16-r0
- (no CPE)range: < 7.2.12-r2
- (no CPE)range: < 6.2.16-r0
- (no CPE)range: < 7.2.6-r0
- (no CPE)range: < 7.4.1-r0
- (no CPE)range: < 7.2.12-r2
- (no CPE)range: < 7.2.12-r2
- (no CPE)range: >= 2.6.0, < 6.3.4
- (no CPE)range: >= 2.6.0, < 6.2.16
- (no CPE)range: < 7.2.7
- (no CPE)range: < 7.2.6-1.module_el9.5.0+130+36ae7635
- (no CPE)range: < 7.2.6-1.module_el9.5.0+130+36ae7635
- (no CPE)range: < 7.2.6-1.module_el9.5.0+130+36ae7635
- (no CPE)range: < 6.2.6-150400.3.28.1
- (no CPE)range: < 7.2.4-150600.3.3.1
- (no CPE)range: < 8.0.2-1.1
- (no CPE)range: < 7.0.8-150500.3.12.1
- (no CPE)range: < 7.0.8-150600.8.3.1
- (no CPE)range: < 8.0.1-1.1
- (no CPE)range: < 6.0.14-150200.6.32.1
- (no CPE)range: < 6.0.14-150200.6.32.1
- (no CPE)range: < 6.2.6-150400.3.28.1
- (no CPE)range: < 6.2.6-150400.3.28.1
- (no CPE)range: < 6.2.6-150400.3.28.1
- (no CPE)range: < 7.2.4-150600.3.3.1
- (no CPE)range: < 6.0.14-150200.6.32.1
- (no CPE)range: < 6.2.6-150400.3.28.1
- (no CPE)range: < 6.0.14-150200.6.32.1
- (no CPE)range: < 6.2.6-150400.3.28.1
- (no CPE)range: < 6.2.6-150400.3.28.1
- (no CPE)range: < 6.2.6-150400.3.28.1
- (no CPE)range: < 7.0.8-150500.3.12.1
- (no CPE)range: < 7.0.8-150600.8.3.1

Patches

Vulnerability mechanics

References

github.com/redis/redis/commit/1f7c148be2cbacf7d50aa461c58b871e87cc5ed9nvdPatch
github.com/redis/redis/security/advisories/GHSA-whxg-wx83-85p5nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000