Skip to content
fr Sign in
7.0 High

CVE-2024-25115 RedisBloom adds a set of probabilistic data structures to Redis

Description

RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, specially crafted `CF.LOADCHUNK` commands may be used by authenticated users to perform heap overflow, which may lead to remote code execution. The problem is fixed in RedisBloom 2.4.7 and 2.6.10.

Affected products and versions

Product Affected versions Fixed in
RedisBloom 2.5 2.5.0 → < 2.6.10 2.6.10
RedisBloom 2.0 2.0.0 → < 2.4.7 2.4.7
redisbloom 2.5 2.5.0 → < 2.6.10 2.6.10

References

Timeline

  1. Published
  2. Last modified

Other CVEs of RedisBloom

The 4 CVEs of RedisBloom →
CVE-2026-25589 RedisBloom is a probabilistic data structures module for Redis 7.7 High CVE-2024-55656 RedisBloom adds a set of probabilistic data structures to Redis 8.8 High CVE-2024-25116 RedisBloom adds a set of probabilistic data structures to Redis 5.5 Medium
Track this CVE