Redis released seven security patches on July 23 to mitigate vulnerabilities that allow authenticated Remote Code Execution (RCE) via memory corruption. The flaws affect several branches including 6.2.22, 7.4.9, 8.6.4, and 8.8.0, primarily involving the RESTORE command. Specific issues include a shared-NACK use-after-free bug in Redis Streams and an out-of-bounds write in the TDigest RDB loader used by the RedisBloom module.
Although some of the targeted versions were released as security updates earlier in May, researchers discovered that essential protection guards were omitted from those releases. Exploit scripts have been developed to transform these memory flaws into arbitrary memory access and system-level command execution. Organizations are strongly advised to upgrade to the latest fixed versions or restrict access to the RESTORE command to mitigate the risk of exploitation.
Top comments (0)