CVE-2024-31449
Full vulnerability record from the local CVENow database.
Description
Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Severity
HIGH
CVSS score
8.8
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2024-10-07 20:15:05.507000
Last modified
2026-11-04 00:17:18.600000
View original CVE JSON
{
"id": "CVE-2024-31449",
"sourceIdentifier": "[email protected]",
"published": "2024-10-07T20:15:05.507",
"lastModified": "2026-11-04T00:17:18.600",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability."
},
{
"lang": "es",
"value": "Redis es una base de datos en memoria de código abierto que persiste en el disco. Un usuario autenticado puede usar un script Lua especialmente manipulado para provocar un desbordamiento del búfer de pila en la librería de bits, lo que puede provocar la ejecución remota de código. El problema existe en todas las versiones de Redis con scripts Lua. Este problema se ha solucionado en las versiones 6.2.16, 7.2.6 y 7.4.1 de Redis. Se recomienda a los usuarios que actualicen la versión. No existen workarounds conocidas para esta vulnerabilidad."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "redis",
"product": "redis",
"versions": [
{
"version": ">= 2.6, < 6.2.16",
"status": "affected"
},
{
"version": ">= 7.0.0, < 7.2.6",
"status": "affected"
},
{
"version": ">= 7.3.0, < 7.4.1",
"status": "affected"
}
]
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"vendor": "redis",
"product": "redis",
"defaultStatus": "unknown",
"cpes": [
"cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2.6",
"lessThan": "6.2.16",
"versionType": "custom",
"status": "affected"
},
{
"version": "7.0.0",
"lessThan": "7.2.6",
"versionType": "custom",
"status": "affected"
},
{
"version": "7.3.0",
"lessThan": "7.4.1",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2024-11-19T04:55:44.585080Z",
"id": "CVE-2024-31449",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-20"
},
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.8.18",
"versionEndExcluding": "6.2.16",
"matchCriteriaId": "92118EB1-660D-4859-BA6D-FDC64E5C48F4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.2.0",
"versionEndExcluding": "7.2.6",
"matchCriteriaId": "4F8A45E4-57CF-4B05-B188-A75BBDF37822"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:redis:redis:7.4.0:-:*:*:*:*:*:*",
"matchCriteriaId": "4C484C7C-4C3B-45F6-8DF5-84CFE5FF2717"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:redis:redis:7.4.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "14EE168F-747A-43EE-84B8-14C332A7F1CB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:redis:redis:7.4.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "C983360E-DC98-4C5A-A088-7DCE273595A1"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/redis/redis/commit/1f7c148be2cbacf7d50aa461c58b871e87cc5ed9",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/redis/redis/security/advisories/GHSA-whxg-wx83-85p5",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}