This vulnerability (CWE-770) involves the allocation of resources without limits or throttling in the Redis service component of the Thinkst Canary honeypot. An unauthenticated remote attacker can exploit this flaw to execute a denial-of-service attack against the honeypot, causing service disruption. The issue is only exploitable if the Redis service is enabled; disabling Redis mitigates the vulnerability. Thinkst Applied Research has addressed the issue by releasing updates and a patched Docker image. Customers with automatic updates enabled have already received the fix, while others are advised to update manually. Workarounds are available for those who cannot update immediately.

The vulnerability allows an unauthenticated remote attacker to cause a denial-of-service condition against the Canary honeypot by exploiting uncontrolled resource allocation in the Redis service. There is no impact on confidentiality or integrity, only availability is affected. The risk is limited to deployments with Redis enabled. No known exploits are reported in the wild.

Thinkst Applied Research has provided official patches for all supported platforms and a new Docker image with the fix. Customers with automatic updates enabled have already received the patch. Those with automatic updates disabled should manually update their Canary devices. Disabling the Redis service entirely also mitigates the vulnerability. Workarounds are available for customers unable to update immediately. Users should follow vendor guidance to apply updates or disable Redis to prevent exploitation.