CVE-2025-48367 — Redis DoS Vulnerability due to bad connection error handling
Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimat…
Published: 2025-07-07 · CVSS: 7.5 · CVSS 3.1
Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7