CVE-2024-51737CWE-122CWE-190

RediSearch Integer Overflow with LIMIT or KNN arguments can lead to RCE

High · published January 8, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
32.4
In the wild
Unconfirmed
What it is

RediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticated redis user executing FT.SEARCH or FT.AGGREGATE with a specially crafted LIMIT command argument, or FT.SEARCH with a specially crafted KNN command argument, can trigger an integer overflow, leading to heap overflow and potential remote code execution. This vulnerability is fixed in 2.6.24, 2.8.21, and 2.10.10. Avoid setting value of -1 or large values for configuration parameters MAXSEARCHRESULTS and MAXAGGREGATERESULTS, to avoid exploiting large LIMIT arguments.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00394 · 32.4th percentile
Weaknesses
CWE-122 · Heap-based Buffer Overflow; CWE-190 · Integer Overflow or Wraparound
Published
2025-01-08T15:27Z
EPSS history
Timeline
  • 08 JAN 15:27Z
    RediSearch Integer Overflow with LIMIT or KNN arguments can lead to RCE
    cvelistv5