tocsin

Debian/redis: high 7.5

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by mor

Action: Upgrade redis to 5:7.0.15-1~deb12u9 or later.

Affected

introducedfixedlast affected
05:7.0.15-1~deb12u9-

Fixed versions

5:7.0.15-1~deb12u9

Sources

published · modified · JSON