Redis DoS Vulnerability due to bad connection error handling
Published Jul 7, 2025
7.5
HIGHCVSS 3.1
EPSS 1.15%
Description
Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19.
Affected products
-
- Version < 6.2.19StatusaffectedConstraints-
- Version >= 7.0.0, < 7.2.10StatusaffectedConstraints-
- Version >= 7.4-rc1, < 7.4.5StatusaffectedConstraints-
- Version >= 8.0.0, < 8.0.3StatusaffectedConstraints-
- Version
No data.
Red Hat Enterprise Linux 10
valkey-0:8.0.4-1.el10_0
Fixed · RHSA-2025:11401
Red Hat Enterprise Linux 8
redis:6-8100020250716063446.489197e6
Fixed · RHSA-2025:12006
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
redis:6-8040020250801055559.522a0ee4
Fixed · RHSA-2025:12789
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
redis:6-8040020250801055559.522a0ee4
Fixed · RHSA-2025:12789
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
redis:6-8060020250731141235.ad008a3a
Fixed · RHSA-2025:12769
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
redis:6-8060020250731141235.ad008a3a
Fixed · RHSA-2025:12769
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
redis:6-8060020250731141235.ad008a3a
Fixed · RHSA-2025:12769
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
redis:6-8080020250730132007.63b34585
Fixed · RHSA-2025:12768
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
redis:6-8080020250730132007.63b34585
Fixed · RHSA-2025:12768
Red Hat Enterprise Linux 9
redis-0:6.2.19-1.el9_6
Fixed · RHSA-2025:11453
Red Hat Enterprise Linux 9
redis:7-9060020250716081121.9
Fixed · RHSA-2025:12008
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
redis-0:6.2.6-1.el9_0.4
Fixed · RHSA-2025:12468
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
redis-0:6.2.7-1.el9_2.4
Fixed · RHSA-2025:12478
Red Hat Enterprise Linux 9.4 Extended Update Support
redis-0:6.2.7-1.el9_4.4
Fixed · RHSA-2025:12524
Red Hat Enterprise Linux 9.4 Extended Update Support
redis:7-9040020250730125543.9
Fixed · RHSA-2025:12892
Red Hat AI Inference Server
rhaiis/vllm-cuda-rhel9
Will not fix
Red Hat AI Inference Server
rhaiis/vllm-rocm-rhel9
Will not fix
Red Hat Ansible Automation Platform 2
ansible-automation-platform-24/de-minimal-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-24/de-minimal-rhel9
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-24/ee-supported-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-24/ee-supported-rhel9
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/aap-cloud-metrics-collector-rhel8
Will not fix
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/ansible-dev-tools-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/de-minimal-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/de-minimal-rhel9
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/ee-supported-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/ee-supported-rhel9
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/lightspeed-chatbot-rhel8
Affected
Red Hat Ansible Automation Platform 2
automation-controller
Affected
Red Hat Developer Hub
rhdh/rhdh-hub-rhel9
Not affected
Red Hat Developer Hub
rhdh/rhdh-rhel9-operator
Not affected
Red Hat Discovery 1
discovery/discovery-server-rhel9
Not affected
Red Hat Enterprise Linux 9
valkey
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-amd-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-aws-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-azure-amd-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-azure-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-gcp-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-intel-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/gemma-2-9b-it
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/gemma-2-9b-it-fp8
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/granite-3.1-8b-lab-v2.1
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/granite-3.1-8b-starter-v2.1
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/instructlab-amd-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/instructlab-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/modelcar-gemma-2-9b-it
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/modelcar-gemma-2-9b-it-fp8
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/modelcar-granite-3-1-8b-lab-v2-1
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/modelcar-granite-3-1-8b-starter-v2-1
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-data-science-pipelines-argo-argoexec-rhel9
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-feast-operator-rhel9
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-feature-server-rhel9
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-ml-pipelines-api-server-v2-rhel9
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-ml-pipelines-driver-rhel9
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-ml-pipelines-launcher-rhel9
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9
Not affected
Red Hat Quay 3
quay/quay-rhel8
Affected
Red Hat Satellite 6
satellite/iop-advisor-engine-rhel9
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | valkey-0:8.0.4-1.el10_0 | Fixed | RHSA-2025:11401 |
| Red Hat Enterprise Linux 8 | redis:6-8100020250716063446.489197e6 | Fixed | RHSA-2025:12006 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | redis:6-8040020250801055559.522a0ee4 | Fixed | RHSA-2025:12789 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | redis:6-8040020250801055559.522a0ee4 | Fixed | RHSA-2025:12789 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | redis:6-8060020250731141235.ad008a3a | Fixed | RHSA-2025:12769 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | redis:6-8060020250731141235.ad008a3a | Fixed | RHSA-2025:12769 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | redis:6-8060020250731141235.ad008a3a | Fixed | RHSA-2025:12769 |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | redis:6-8080020250730132007.63b34585 | Fixed | RHSA-2025:12768 |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | redis:6-8080020250730132007.63b34585 | Fixed | RHSA-2025:12768 |
| Red Hat Enterprise Linux 9 | redis-0:6.2.19-1.el9_6 | Fixed | RHSA-2025:11453 |
| Red Hat Enterprise Linux 9 | redis:7-9060020250716081121.9 | Fixed | RHSA-2025:12008 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | redis-0:6.2.6-1.el9_0.4 | Fixed | RHSA-2025:12468 |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | redis-0:6.2.7-1.el9_2.4 | Fixed | RHSA-2025:12478 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | redis-0:6.2.7-1.el9_4.4 | Fixed | RHSA-2025:12524 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | redis:7-9040020250730125543.9 | Fixed | RHSA-2025:12892 |
| Red Hat AI Inference Server | rhaiis/vllm-cuda-rhel9 | Will not fix | n/a |
| Red Hat AI Inference Server | rhaiis/vllm-rocm-rhel9 | Will not fix | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-24/de-minimal-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-24/de-minimal-rhel9 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-24/ee-supported-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-24/ee-supported-rhel9 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/aap-cloud-metrics-collector-rhel8 | Will not fix | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/ansible-dev-tools-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/de-minimal-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/de-minimal-rhel9 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/ee-supported-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/ee-supported-rhel9 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/lightspeed-chatbot-rhel8 | Affected | n/a |
| Red Hat Ansible Automation Platform 2 | automation-controller | Affected | n/a |
| Red Hat Developer Hub | rhdh/rhdh-hub-rhel9 | Not affected | n/a |
| Red Hat Developer Hub | rhdh/rhdh-rhel9-operator | Not affected | n/a |
| Red Hat Discovery 1 | discovery/discovery-server-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | valkey | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-amd-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-aws-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-azure-amd-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-azure-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-gcp-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-intel-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/gemma-2-9b-it | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/gemma-2-9b-it-fp8 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/granite-3.1-8b-lab-v2.1 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/granite-3.1-8b-starter-v2.1 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/instructlab-amd-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/instructlab-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/modelcar-gemma-2-9b-it | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/modelcar-gemma-2-9b-it-fp8 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/modelcar-granite-3-1-8b-lab-v2-1 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/modelcar-granite-3-1-8b-starter-v2-1 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-feast-operator-rhel9 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-feature-server-rhel9 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-ml-pipelines-api-server-v2-rhel9 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-ml-pipelines-driver-rhel9 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-ml-pipelines-launcher-rhel9 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9 | Not affected | n/a |
| Red Hat Quay 3 | quay/quay-rhel8 | Affected | n/a |
| Red Hat Satellite 6 | satellite/iop-advisor-engine-rhel9 | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
The severity of this vulnerability is rated Moderate as it does not impact system availability. The effects are confined to the application layer without compromising the underlying system stability.
Red Hat mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1 other source (Red Hat) ▾
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
YesTechnical Impact
PartialDecision
n/aAssessed Jul 7, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.
Score over time
2025–2026- EPSS v4
- EPSS v5
Percentile over time
- EPSS v4
- EPSS v5
Table of values (3 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 3, 2026 | 1.15% (0.01146) | 65.64th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.73% (0.00733) | 49.37th | v5 (v2026.06.15) |
| Jul 8, 2025 | 0.02% (0.00021) | 3.87th | v4 (v2025.03.14) |
References (11)
- https://access.redhat.com/security/cve/CVE-2025-48367 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2376857 Issue Tracking
- https://github.com/redis/redis/commit/bde62951accfc4bb0a516276fd0b4b307e140ce2 x_refsource_MISCPatch
- https://github.com/redis/redis/releases/tag/6.2.19 x_refsource_MISCRelease Notes
- https://github.com/redis/redis/releases/tag/7.2.10 x_refsource_MISCRelease Notes
- https://github.com/redis/redis/releases/tag/7.4.5 x_refsource_MISCRelease Notes
- https://github.com/redis/redis/releases/tag/8.0.3 x_refsource_MISCRelease Notes
- https://github.com/redis/redis/security/advisories/GHSA-4q32-c38c-pwgq x_refsource_CONFIRMThird Party Advisory
- https://github.com/valkey-io/valkey/releases
- https://nvd.nist.gov/vuln/detail/CVE-2025-48367
- https://www.cve.org/CVERecord?id=CVE-2025-48367
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2025-48367 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2376857 | Issue Tracking | |
| https://github.com/redis/redis/commit/bde62951accfc4bb0a516276fd0b4b307e140ce2 | x_refsource_MISCPatch | |
| https://github.com/redis/redis/releases/tag/6.2.19 | x_refsource_MISCRelease Notes | |
| https://github.com/redis/redis/releases/tag/7.2.10 | x_refsource_MISCRelease Notes | |
| https://github.com/redis/redis/releases/tag/7.4.5 | x_refsource_MISCRelease Notes | |
| https://github.com/redis/redis/releases/tag/8.0.3 | x_refsource_MISCRelease Notes | |
| https://github.com/redis/redis/security/advisories/GHSA-4q32-c38c-pwgq | x_refsource_CONFIRMThird Party Advisory | |
| https://github.com/valkey-io/valkey/releases | ||
| https://nvd.nist.gov/vuln/detail/CVE-2025-48367 | ||
| https://www.cve.org/CVERecord?id=CVE-2025-48367 |
Change history (0)
No recorded changes yet.