CVE-2024-51480 Information

Description

RedisTimeSeries is a time-series database (TSDB) module for Redis by Redis. Executing one of these commands TS.QUERYINDEX TS.MGET TS.MRAGE TS.MREVRANGE by an authenticated user using specially crafted command arguments may cause an integer overflow a subsequent heap overflow and potentially lead to remote code execution. This vulnerability is fixed in 1.6.20 1.8.15 1.10.15 and 1.12.3.

Reference

https://github.com/RedisTimeSeries/RedisTimeSeries/security/advisories/GHSA-73x6-fqww-x8rg