Overview
The vulnerability CVE-2025-48367 has been identified affecting Redis, an open-source, in-memory database system that persists on disk. The vulnerability is significant as it enables an unauthenticated connection to trigger repeated IP protocol errors, resulting in client starvation and a denial of service. This risk of potential system compromise or data leakage makes it crucial for system administrators and cybersecurity professionals to address this issue promptly.
Vulnerability Summary
CVE ID: CVE-2025-48367
Severity: High (CVSS: 7.5)
Attack Vector: Network
Privileges Required: None
User Interaction: None
Impact: Denial of service leading to potential system compromise or data leakage
Affected Products
Share secrets securely
Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.
Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.
- • Encrypted identity
- • Private Spaces for organizations and teams
- • End-to-end encrypted chat, calls, files, and notes
- • Sensitive AI work and protected collaboration
- • Built for information that cannot leak
Our mission is to secure human work alongside AI.
Product | Affected Versions
Redis | < 8.0.3 Redis | < 7.4.5 Redis | < 7.2.10 Redis | < 6.2.19 How the Exploit Works
The vulnerability exists due to a lack of proper authentication when establishing a connection with the Redis database. An attacker can exploit this by creating an unauthenticated connection, causing the system to generate repeated IP protocol errors. These errors can lead to client starvation, where legitimate client requests are not processed. Over time, this can exhaust the system’s resources, leading to a denial of service. This process can potentially lead to system compromise or data leakage.
Conceptual Example Code
Here is a conceptual example of how an attacker might exploit this vulnerability through a network connection:
CONNECT target.example.com:6379
SEND { "malicious_payload": "trigger IP protocol errors" }The above pseudocode implies that an attacker is forming a connection to the vulnerable Redis server and sending a malicious payload designed to trigger IP protocol errors, leading to a DoS condition.