High severity7.0NVD Advisory· Published Jan 6, 2025· Updated Jun 17, 2026

CVE-2024-46981

Description

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Redis/Redis3 versions
cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*range: >=6.2.0,<6.2.17
- (no CPE)range: <7.4.2, <7.2.7, <6.2.17
- (no CPE)range: >= 7.4.0, < 7.4.2
Debian/linux
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
osv-coords62 versions
pkg:apk/chainguard/py3-redis pkg:apk/chainguard/py3.10-redis pkg:apk/chainguard/py3.11-redis pkg:apk/chainguard/py3.12-redis pkg:apk/chainguard/py3.13-redis pkg:apk/chainguard/redis-6.2 pkg:apk/chainguard/redis-6.2-bitnami-compat pkg:apk/chainguard/redis-7.2 pkg:apk/chainguard/redis-7.2-bitnami-compat pkg:apk/chainguard/redis-7.2-iamguarded-compat pkg:apk/chainguard/redis-7.4 pkg:apk/chainguard/redis-7.4-bitnami-compat pkg:apk/chainguard/redis-benchmark-6.2 pkg:apk/chainguard/redis-benchmark-7.2 pkg:apk/chainguard/redis-benchmark-7.4 pkg:apk/chainguard/redis-cli-6.2 pkg:apk/chainguard/redis-cli-7.2 pkg:apk/chainguard/redis-cli-7.4 pkg:apk/chainguard/redis-cluster-6.2-bitnami-compat pkg:apk/chainguard/redis-cluster-7.2-bitnami-compat pkg:apk/chainguard/redis-cluster-7.2-iamguarded-compat pkg:apk/chainguard/redis-cluster-7.4-bitnami-compat pkg:apk/chainguard/redis-sentinel-6.2-bitnami-compat pkg:apk/chainguard/redis-sentinel-7.2-bitnami-compat pkg:apk/chainguard/redis-sentinel-7.2-iamguarded-compat pkg:apk/chainguard/redis-sentinel-7.4-bitnami-compat pkg:apk/wolfi/redis-6.2 pkg:apk/wolfi/redis-7.2 pkg:apk/wolfi/redis-7.4 pkg:apk/wolfi/redis-benchmark-7.2 pkg:apk/wolfi/redis-cli-7.2 pkg:bitnami/keydb pkg:bitnami/redis pkg:bitnami/valkey pkg:rpm/almalinux/redis pkg:rpm/almalinux/redis-devel pkg:rpm/almalinux/redis-doc pkg:rpm/opensuse/redis&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/redis&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/redis7&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/valkey&distro=openSUSE%20Tumbleweed pkg:rpm/rocky-linux/redis?distro=rocky-linux-9&epoch=0 pkg:rpm/suse/redis&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6 pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/redis&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/redis&distro=SUSE%20Manager%20Server%204.3 pkg:rpm/suse/redis7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/redis7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/redis7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6 pkg:rpm/suse/redis7&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/redis7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5
< 0+ 61 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 6.2.17-r0
- (no CPE)range: < 6.2.17-r0
- (no CPE)range: < 7.2.7-r0
- (no CPE)range: < 7.2.7-r0
- (no CPE)range: < 7.2.12-r2
- (no CPE)range: < 7.4.2-r0
- (no CPE)range: < 7.4.2-r0
- (no CPE)range: < 6.2.17-r0
- (no CPE)range: < 7.2.12-r2
- (no CPE)range: < 7.4.2-r0
- (no CPE)range: < 6.2.17-r0
- (no CPE)range: < 7.2.12-r2
- (no CPE)range: < 7.4.2-r0
- (no CPE)range: < 6.2.17-r0
- (no CPE)range: < 7.2.7-r0
- (no CPE)range: < 7.2.12-r2
- (no CPE)range: < 7.4.2-r0
- (no CPE)range: < 6.2.17-r0
- (no CPE)range: < 7.2.7-r0
- (no CPE)range: < 7.2.12-r2
- (no CPE)range: < 7.4.2-r0
- (no CPE)range: < 6.2.17-r0
- (no CPE)range: < 7.2.7-r0
- (no CPE)range: < 7.4.2-r0
- (no CPE)range: < 7.2.12-r2
- (no CPE)range: < 7.2.12-r2
- (no CPE)range: < 6.3.4
- (no CPE)range: < 6.2.17
- (no CPE)range: < 8.0.2
- (no CPE)range: < 6.2.17-1.module_el8.10.0+3946+3de613d5
- (no CPE)range: < 6.2.17-1.module_el8.10.0+3946+3de613d5
- (no CPE)range: < 6.2.17-1.module_el8.10.0+3946+3de613d5
- (no CPE)range: < 7.2.4-150600.3.6.1
- (no CPE)range: < 8.0.2-1.1
- (no CPE)range: < 7.0.8-150600.8.6.1
- (no CPE)range: < 8.0.2-1.1
- (no CPE)range: < 0:7.2.7-1.module+el9.5.0+30204+5d6debe1
- (no CPE)range: < 6.0.14-150200.6.32.1
- (no CPE)range: < 6.0.14-150200.6.32.1
- (no CPE)range: < 6.2.6-150400.3.31.1
- (no CPE)range: < 6.2.6-150400.3.31.1
- (no CPE)range: < 6.2.6-150400.3.31.1
- (no CPE)range: < 6.2.6-150400.3.31.1
- (no CPE)range: < 7.2.4-150600.3.6.1
- (no CPE)range: < 6.0.14-150200.6.32.1
- (no CPE)range: < 6.2.6-150400.3.31.1
- (no CPE)range: < 6.2.6-150400.3.31.1
- (no CPE)range: < 6.0.14-150200.6.32.1
- (no CPE)range: < 6.2.6-150400.3.31.1
- (no CPE)range: < 6.2.6-150400.3.31.1
- (no CPE)range: < 6.2.6-150400.3.31.1
- (no CPE)range: < 6.2.6-150400.3.31.1
- (no CPE)range: < 7.0.8-150500.3.15.1
- (no CPE)range: < 7.0.8-150500.3.15.1
- (no CPE)range: < 7.0.8-150600.8.6.1
- (no CPE)range: < 7.0.8-150500.3.15.1
- (no CPE)range: < 7.0.8-150500.3.15.1

Patches

Vulnerability mechanics

References

www.vicarius.io/vsociety/posts/cve-2024-46981-detect-redis-vulnerabilitynvdExploitThird Party Advisory
www.vicarius.io/vsociety/posts/cve-2024-46981-mitigate-redis-vulnerabilitynvdExploitThird Party Advisory
github.com/redis/redis/security/advisories/GHSA-39h2-x6c4-6w4cnvdVendor Advisory
lists.debian.org/debian-lts-announce/2025/01/msg00018.htmlnvdMailing ListThird Party Advisory
github.com/redis/redis/releases/tag/6.2.17nvdRelease Notes
github.com/redis/redis/releases/tag/7.2.7nvdRelease Notes
github.com/redis/redis/releases/tag/7.4.2nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.007
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000