onyx --cves cve-2025-48367
CVE-2025-48367
- score
- <0.1
- cvss
- 7.5
- epss
- 1.2%
- published
- 2025-07-07
- kev added
- —
- first seen
Redis contains a denial of service caused by repeated IP protocol errors from unauthenticated connections, letting remote attackers cause client starvation and service disruption, exploit requires no authentication.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 6
- https://github.com/redis/redis/commit/bde62951accfc4bb0a516276fd0b4b307e140ce2
- https://github.com/redis/redis/releases/tag/6.2.19
- https://github.com/redis/redis/releases/tag/7.2.10
- https://github.com/redis/redis/releases/tag/7.4.5
- https://github.com/redis/redis/releases/tag/8.0.3
- https://github.com/redis/redis/security/advisories/GHSA-4q32-c38c-pwgq