The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:0692 advisory.

    * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981)
      * redis: Redis allows denial-of-service due to malformed ACL selectors (CVE-2024-51741)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient     privileges may create a malformed ACL selector which, when accessed, triggers a server panic and     subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2. (CVE-2024-51741)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7321-1 advisory.

    It was discovered that Redis incorrectly handled certain memory operations during pattern matching. An     attacker could possibly use this issue to cause a denial of service. (CVE-2024-31228)

    It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. An attacker could     possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2024-46981)

    It was discovered that Redis incorrectly handled some malformed ACL selectors. An attacker could possibly     use this issue to cause a denial of service. This issue only affected Ubuntu 24.10 and Ubuntu 24.04 LTS.
    (CVE-2024-51741)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0035 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-46981:
    Redis is an open source, in-memory database that persists on disk. An authenticated user may use a     specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code     execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the     problem without patching the redis-server executable is to prevent users from executing Lua scripts. This     can be done using ACL to restrict EVAL and EVALSHA commands.

    CVE-2024-51741:
    Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient     privileges may create a malformed ACL selector which, when accessed, triggers a server panic and     subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9608:01 advisory.

    * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981)
      * redis: Redis allows denial-of-service due to malformed ACL selectors (CVE-2024-51741)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the redis package has been released.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-282df7372b advisory.

    update to 7.3.2       fixes CVE-2024-46981       fixes CVE-2024-51741       fixes CVE-2024-31449       fixes CVE-2024-31227       fixes CVE-2024-31228

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d6c0319427 advisory.

    update to 7.3.2       fixes CVE-2024-46981       fixes CVE-2024-51741       fixes CVE-2024-31449       fixes CVE-2024-31227       fixes CVE-2024-31228

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202511-05 (redict, redis: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below     for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b332afed45 advisory.

    update to 8.0.2     fixes CVE-2024-46981 - Lua script commands may lead to remote code execution     fixes CVE-2024-51741 - Denial-of-service due to malformed ACL selectors


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0163-1 advisory.

    - CVE-2024-51741: Fixed a bug where malformed ACL selectors can trigger a server panic when accessed.
    (bsc#1235386)
    - CVE-2024-46981: Fixed a bug where lua scripts can be used to manipulate the garbage collector, leading     to remote code execution. (bsc#1235387)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:0692 advisory.

    Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can     contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data     set. You can persist it either by dumping the data set to disk every once in a while, or by appending each     command to a log.

    Security Fix(es):

    * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981)

    * redis: Redis allows denial-of-service due to malformed ACL selectors (CVE-2024-51741)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:0692 advisory.

    * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981)

    * redis: Redis allows denial-of-service due to malformed ACL selectors (CVE-2024-51741)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7359-1 advisory.

    It was discovered that Valkey did not properly handle memory cleanup. An attacker could possibly use this     issue to execute arbitrary code. (CVE-2024-46981)

    It was discovered that Valkey did not properly handle resource access permissions. An authenticated     attacker could possibly use this issue to cause a denial of service. (CVE-2024-51741)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
214767	AlmaLinux 9 : redis:7 (ALSA-2025:0692)	Nessus	Alma Linux Local Security Checks	2025/1/29	2025/9/8	critical
247376	Linux Distros Unpatched Vulnerability : CVE-2024-51741	Nessus	Misc.	2025/8/10	2026/4/29	medium
228824	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Redis vulnerabilities (USN-7321-1)	Nessus	Ubuntu Local Security Checks	2025/3/5	2025/9/3	high
239120	TencentOS Server 4: redis (TSSA-2025:0035)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	critical
291757	MiracleLinux 9 : redis:7 (AXSA:2025-9608:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
272154	Photon OS 4.0: Redis PHSA-2025-4.0-0891	Nessus	PhotonOS Local Security Checks	2025/11/1	2025/11/18	critical
214298	Fedora 40 : redict (2025-282df7372b)	Nessus	Fedora Local Security Checks	2025/1/17	2025/9/8	critical
214301	Fedora 41 : redict (2025-d6c0319427)	Nessus	Fedora Local Security Checks	2025/1/17	2025/9/8	critical
276669	GLSA-202511-05 : redict, redis: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2025/11/24	2025/11/24	critical
213612	Fedora 41 : valkey (2025-b332afed45)	Nessus	Fedora Local Security Checks	2025/1/9	2025/9/8	critical
214364	SUSE SLES15 / openSUSE 15 Security Update : redis (SUSE-SU-2025:0163-1)	Nessus	SuSE Local Security Checks	2025/1/18	2025/9/8	critical
214700	RHEL 9 : redis:7 (RHSA-2025:0692)	Nessus	Red Hat Local Security Checks	2025/1/28	2025/9/8	critical
232898	RockyLinux 9 : redis:7 (RLSA-2025:0692)	Nessus	Rocky Linux Local Security Checks	2025/3/19	2025/3/19	high
233020	Ubuntu 24.04 LTS / 24.10 : Valkey vulnerabilities (USN-7359-1)	Nessus	Ubuntu Local Security Checks	2025/3/20	2025/3/20	high

检测

插件搜索

critical

medium

high

critical

critical

critical

critical

critical

critical

critical

critical

critical

high

high