CyberRota Analysis
AI-GeneratedA vulnerability exists in the Redis community's cluster bus packet parser, which inadequately validates null-termination in string-carrying extensions for PING, PONG, and MEET packets. This flaw could allow remote attackers to exploit the system, potentially leading to sensitive information disclosure or a remote denial of service (DoS). Organizations using Redis should prioritize addressing this issue to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).