Critical Redis Vulnerabilities: Urgent Update Needed
A serious security threat has been identified in the popular open-source database Redis. IT administrators are urged to update their installations immediately to patch four critical vulnerabilities. The vulnerabilities, discovered by IT security researchers from Wiz, allow malicious LUA scripts to manipulate memory, cause crashes, and execute arbitrary code.
The most severe vulnerability, tracked as CVE-2025-46819 and EUVD-2025-32327, enables crafted LUA scripts to access memory outside designated areas, leading to server crashes and denial of service. Another vulnerability, CVE-2025-46818 and EUVD-2025-32328, allows LUA scripts to manipulate other LUA objects and execute their own code in the context of other users. A third issue, CVE-2025-46817 and EUVD-2025-32363, can cause an integer overflow, facilitating code injection from the internet.
To mitigate these risks, Redis instances should be updated to version 8.2.2 or newer. Linux distributions are expected to provide updated packages soon. IT administrators should prioritize these updates to protect their systems. Additionally, registered users should be cautious when executing LUA scripts, as they could potentially be manipulated to execute malicious code from the network, as per CVE-2025-49844 and EUVD-2025-32326.
The Redis database is widely used, and these vulnerabilities pose a significant risk to many systems. IT administrators should take immediate action to update their installations. The updates close four critical security vulnerabilities and protect against potential data breaches and system compromises. Linux distributions are also urged to provide updated packages promptly to ensure the security of their users.
Read also:
- Bishkek: A Time-Capsule City of Soviet Statues and Architecture
- Mitsubishi Electric Acquires Nozomi Networks for $883M in Industrial Cybersecurity Boost
- Strengthening Defense against Multi-faceted menaces in the Age of Authority-driven Technology
- Industries Under Jeopardy Due to Multi-Accounting: Prevention Strategies Revealed in 2024
