CyberRota Analysis
AI-GeneratedAn out-of-bounds read vulnerability in Redis versions up to 8.8.1 allows unauthenticated adjacent attackers to exploit the system by sending a specially crafted PING message, potentially leading to denial of service or information disclosure. The vulnerability arises from improper validation of extension length fields in the cluster bus message parser, which can result in reading beyond the allocated buffer. Organizations using Redis should prioritize patching this vulnerability to mitigate risks associated with unauthorized access and service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port.