CVE Feed

    Dashboard / CVE / CVE-2025-48367

    CVE-2025-48367

    Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.

    Published:Jul 7, 2025
    Last Modified:Sep 5, 2025
    EPS:Jul 7, 2025
    EPSS Score:0.00039
    CVSS Score:7.5

    Affected Products

    Vendor
    Redis
    Product
    Redis

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-81934 (CVSS 7.5) — Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS…
    CVE-2026-72568 (CVSS 7.1) — Red Hat CNA-LR concluded that this CVE is not valid.…
    CVE-2026-66373 (CVSS 7.5) — Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote cod…
    CVE-2026-25243 (CVSS 7.7) — Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does …
    CVE-2026-23631 (CVSS 6.1) — Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticat…
    CVE-2026-23479 (CVSS 7.7) — Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow do…
    CVE-2025-62507 (CVSS 7.7) — Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run…
    CVE-2025-49844 (CVSS 9.9) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…
    CVE-2025-46819 (CVSS 6.3) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…
    CVE-2025-46818 (CVSS 6) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High