Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.

vendor_unpatched cve-2025-48367: Unpatched CVEs for Debian Linux, Ubuntu Linux (cve-2025-48367)

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02579-1 advisory.

    - CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code     execution. (bsc#1246059)
    - CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client     starvation and DoS. (bsc#1246058)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5969 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5969-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 31, 2025                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : redis     CVE ID         : CVE-2025-27151 CVE-2025-32023 CVE-2025-48367     Debian Bug     : 1106822 1108975 1108981

    Several security issues were discovered in Redis, a persistent key-value     database, which could result in the execution of arbitrary code or     denial of service.

    For the stable distribution (bookworm), these problems have been fixed in     version 5:7.0.15-1~deb12u5.

    We recommend that you upgrade your redis packages.

    For the detailed security status of redis please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/redis

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:12468 advisory.

    Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can     contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data     set. You can persist it either by dumping the data set to disk every once in a while, or by appending each     command to a log.

    Security Fix(es):

    * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)

    * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:12006 advisory.

    * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)
      * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-12008 advisory.

    - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367
    - rebase to 7.2.8 for CVE-2025-21605
    - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-12006 advisory.

    [6.2.19-1.0.1]
    - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64

    [6.2.19-1]
    - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:12006 advisory.

    * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)

    * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:12008 advisory.

    * redis: Redis Stack Buffer Overflow (CVE-2025-27151)
      * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)
      * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:12008 advisory.

    Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can     contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data     set. You can persist it either by dumping the data set to disk every once in a while, or by appending each     command to a log.

    Security Fix(es):

    * redis: Redis Stack Buffer Overflow (CVE-2025-27151)

    * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)

    * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:12006 advisory.

    Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can     contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data     set. You can persist it either by dumping the data set to disk every once in a while, or by appending each     command to a log.

    Security Fix(es):

    * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)

    * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of redis / valkey installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-48367 advisory.

  - Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause     repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This     vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. (CVE-2025-48367)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-34895333b5 advisory.

    **Valkey 8.0.4**  -  Released Mon 07 July 2025

    Upgrade urgency SECURITY: This release includes security fixes we recommend you     apply as soon as possible.

    Security fixes

    * **CVE-2025-32023** prevent out-of-bounds write during hyperloglog operations (#2146)
    * **CVE-2025-48367** retry accept on transient errors (#2315)

    Security fixes backported from 8.1.2

    * **CVE-2025-27151** Check length of AOF file name in valkey-check-aof (#2146)



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8e2eddc063 advisory.

    **Valkey 8.0.4**  -  Released Mon 07 July 2025

    Upgrade urgency SECURITY: This release includes security fixes we recommend you     apply as soon as possible.

    Security fixes

    * **CVE-2025-32023** prevent out-of-bounds write during hyperloglog operations (#2146)
    * **CVE-2025-48367** retry accept on transient errors (#2315)

    Security fixes backported from 8.1.2

    * **CVE-2025-27151** Check length of AOF file name in valkey-check-aof (#2146)



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11453 advisory.

    - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367
    - rebase to 6.2.18 for CVE-2025-21605
    -- rebase to 6.2.17 for CVE-2024-46981

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11401 advisory.

    - update to 8.0.4       fixes CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11453 advisory.

    Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can     contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data     set. You can persist it either by dumping the data set to disk every once in a while, or by appending each     command to a log.

    Security Fix(es):

    * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)

    * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11401 advisory.

    Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can     contain strings, hashes, lists, sets and sorted sets.  You can run atomic operations on these types, like     appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection,     union and difference; or getting the member with highest ranking in a sorted set.  In order to achieve its     outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can     persist it either by dumping the dataset to disk every once in a while, or by appending each command to a     log.  Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first     synchronization, auto-reconnection on net split and so forth.  Other features include Transactions,     Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave     like a cache.  You can use Valkey from most programming languages also.

    Security Fix(es):

    * redis: Redis Stack Buffer Overflow (CVE-2025-27151)

    * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)

    * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of redis / valkey installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-48367 advisory.

  - Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause     repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This     vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. (CVE-2025-48367)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4240 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4240-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     July 12, 2025                                 https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : redis     Version        : 5:6.0.16-1+deb11u7     CVE IDs        : CVE-2025-32023 CVE-2025-48367     Debian Bugs    : 1108975 1108981

    Two issues were discovered in Redis, the key-value database:

    * CVE-2025-32023: An authenticated user may have used a       specially-crafted string to trigger a stack/heap out-of-bounds       write during hyperloglog operations, potentially leading to a       remote code execution vulnerability. Installations that used Redis'       ACL system to restrict hyperloglog HLL commands are unaffected by       this issue.

    * CVE-2025-48367: An unauthenticated connection could have caused       repeated IP protocol errors, leading to client starvation and       ultimately become a Denial of Service (DoS) attack.

    For Debian 11 bullseye, these problems have been fixed in version     5:6.0.16-1+deb11u7.

    We recommend that you upgrade your redis packages.

    For the detailed security status of redis please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/redis

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1066 advisory.

    Redis and Valkey contain a defect such that a well constructed hyperloglog can corrupt arbitrary memory on     the heap, which could lead to remote code execution. (CVE-2025-32023)

    Redis and Valkey contain a defect such that a well constructed hyperloglog can corrupt arbitrary memory on     the heap, which could lead to remote code execution. (CVE-2025-48367)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of redis installed on the remote host is prior to 6.2.14-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2REDIS6-2025-013 advisory.

    Redis and Valkey contain a defect such that a well constructed hyperloglog can corrupt arbitrary memory on     the heap, which could lead to remote code execution. (CVE-2025-32023)

    Redis and Valkey contain a defect such that a well constructed hyperloglog can corrupt arbitrary memory on     the heap, which could lead to remote code execution. (CVE-2025-48367)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1067 advisory.

    Redis and Valkey contain a defect such that a well constructed hyperloglog can corrupt arbitrary memory on     the heap, which could lead to remote code execution. (CVE-2025-32023)

    Redis and Valkey contain a defect such that a well constructed hyperloglog can corrupt arbitrary memory on     the heap, which could lead to remote code execution. (CVE-2025-48367)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7b3e7f71-5b30-11f0-b507-000c295725e4 advisory.

    @julienperriercornet reports:

                 An unauthenticated connection can cause repeated IP                  protocol errors, leading to client starvation and,                  ultimately, a denial of service.


Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
243269	SUSE SLES15 Security Update : redis (SUSE-SU-2025:02579-1)	Nessus	SuSE Local Security Checks	high
243242	Debian dsa-5969 : redis - security update	Nessus	Debian Local Security Checks	high
243234	RHEL 9 : redis (RHSA-2025:12468)	Nessus	Red Hat Local Security Checks	high
243208	AlmaLinux 8 : redis:6 (ALSA-2025:12006)	Nessus	Alma Linux Local Security Checks	high
243194	Oracle Linux 9 : redis:7 (ELSA-2025-12008)	Nessus	Oracle Linux Local Security Checks	high
243190	Oracle Linux 8 : redis:6 (ELSA-2025-12006)	Nessus	Oracle Linux Local Security Checks	high
243098	RockyLinux 8 : redis:6 (RLSA-2025:12006)	Nessus	Rocky Linux Local Security Checks	high
243055	AlmaLinux 9 : redis:7 (ALSA-2025:12008)	Nessus	Alma Linux Local Security Checks	high
242959	RHEL 9 : redis:7 (RHSA-2025:12008)	Nessus	Red Hat Local Security Checks	high
242956	RHEL 8 : redis:6 (RHSA-2025:12006)	Nessus	Red Hat Local Security Checks	high
242948	Azure Linux 3.0 Security Update: redis / valkey (CVE-2025-48367)	Nessus	Azure Linux Local Security Checks	high
242685	Fedora 41 : valkey (2025-34895333b5)	Nessus	Fedora Local Security Checks	high
242683	Fedora 42 : valkey (2025-8e2eddc063)	Nessus	Fedora Local Security Checks	high
242592	Oracle Linux 9 : redis (ELSA-2025-11453)	Nessus	Oracle Linux Local Security Checks	high
242442	Oracle Linux 10 : valkey (ELSA-2025-11401)	Nessus	Oracle Linux Local Security Checks	high
242438	RHEL 9 : redis (RHSA-2025:11453)	Nessus	Red Hat Local Security Checks	high
242425	RHEL 10 : valkey (RHSA-2025:11401)	Nessus	Red Hat Local Security Checks	high
242234	CBL Mariner 2.0 Security Update: redis / valkey (CVE-2025-48367)	Nessus	MarinerOS Local Security Checks	high
242032	Debian dla-4240 : redis - security update	Nessus	Debian Local Security Checks	high
241772	Amazon Linux 2023 : redis6, redis6-devel (ALAS2023-2025-1066)	Nessus	Amazon Linux Local Security Checks	high
241769	Amazon Linux 2 : redis (ALASREDIS6-2025-013)	Nessus	Amazon Linux Local Security Checks	high
241729	Amazon Linux 2023 : valkey, valkey-devel (ALAS2023-2025-1067)	Nessus	Amazon Linux Local Security Checks	high
241489	FreeBSD : redis,valkey -- DoS Vulnerability due to bad connection error handling (7b3e7f71-5b30-11f0-b507-000c295725e4)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2025-48367

high

Tenable Plugins

Coming Soon

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high