cvedb.io
CVE-2025-48367
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2025-07-07T16:15:24.063 · Last modified 2026-06-17T09:29:33.337

Summary

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.

Affected products

redis — redis

Does this affect you?

Add your gear to cvedb and we'll alert you only when redis ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.