CVE-2024-31228

score

<0.1

cvss

5.5

epss

1.0%

published

2024-10-07

kev added

—

first seen

2026-10-21

Redis versions 6.2.16, 7.2.6, and 7.4.1 contain a denial-of-service caused by unbounded recursion when processing specially crafted, long string match patterns on commands like KEYS, SCAN, PSUBSCRIBE, FUNCTION LIST, COMMAND LIST, and ACL definitions, letting authenticated users crash the server, exploit requires authenticated access.