Threats tagged 'bit-redis-2024-46981'

CVE-2024-46981 is a critical vulnerability in Redis that allows an authenticated user to exploit specially crafted Lua scripts to manipulate the garbage collector, potentially leading to remote code execution. This affects multiple Redis versions prior to 6.2.17, 7.2.7, and 7.4.2. Official patches addressing this vulnerability are available in these versions. As a temporary mitigation, administrators can restrict Lua script execution using ACL rules to prevent exploitation until patching is applied.