FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

redis,valkey -- DoS Vulnerability due to bad connection error handling

Affected packages
8.0.0 <= redis < 8.0.3
7.4.0 <= redis74 < 7.4.5
7.2.0 <= redis72 < 7.2.10
6.2.0 <= redis62 < 6.2.19
valkey < 8.1.3

Details

VuXML ID 7b3e7f71-5b30-11f0-b507-000c295725e4
Discovery 2025-07-06
Entry 2025-07-07

@julienperriercornet reports:

An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service.

References

CVE Name CVE-2025-48367
URL https://github.com/redis/redis/security/advisories/GHSA-4q32-c38c-pwgq