CVE Alert: CVE-2024-51480

Vulnerability Summary: CVE-2024-51480

RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MREVRANGE by an authenticated user, using specially crafted command arguments may cause an integer overflow, a subsequent heap overflow, and potentially lead to remote code execution. This vulnerability is fixed in 1.6.20, 1.8.15, 1.10.15, and 1.12.3.

Affected Endpoints:

No affected endpoints listed.

Published Date:

1/8/2025, 4:15:34 PM

🔥 CVSS Score:

Exploit Status:

Not Exploited

References:

• https://github.com/RedisTimeSeries/RedisTimeSeries/security/advisories/GHSA-73×6-fqww-x8rg

Recommended Action:

No proposed action available. Please refer to vendor documentation for updates.

---