CVE-2024-55656
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jan 8, 2025
CWE ID 190
Summary
CVE-2024-55656 is a vulnerability affecting RedisBloom, a module used in Redis, which incorporates probabilistic data structures. An integer overflow issue exists in RedisBloom's CMS.INITBYDIM command, leading to a memory allocation error. An attacker, who is a Redis client with the required password, can exploit this flaw to read and write beyond the allocated memory, causing information leakage and out-of-bounds writes. This vulnerability is resolved in Redis versions 2.2.19, 2.4.12, 2.6.14, and 2.8.2.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- CMs
Affected Vendors
- Pluck -