CVE-2024-31449

High

Advisory

Published 7 Oct 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.045; 91st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 21; of 17,781 indexed, latest versions
Container images: 20; deployed by those charts
Fix available: 6 of 6; affected packages

Lua library commands may lead to stack overflow and RCE in Redis

Carried by container images the latest versions of 21 of 17,781 indexed charts deploy, on 20 images.

Affected package	Affected versions	Fixed in	Images
redisbitnami	6.0.8-0, 6.0.12-0, 6.2.7-150, 7.0.8-0+8 more	6.2.16	12
redisapk	6.2.7-r0, 7.0.15-r0	6.2.18-r0, 7.0.15-r1	3
redisdeb	5:7.0.15-1~deb12u1, 5:7.0.15-1ubuntu0.24.04.1	5:7.0.15-1~deb12u2, 5:7.0.15-1ubuntu0.24.04.4	2
Redis(R)bitnami	7.2.4-5, 7.2.5-0	6.2.16	2
Redis (TM)bitnami	7.2.1, 7.2.4-4	6.2.16	2
lua-bitopdeb	1.0.2-5	1.0.2-5ubuntu0.20.04.1~esm2	3

OSV records: ALPINE-CVE-2024-31449 BIT-redis-2024-31449 DEBIAN-CVE-2024-31449 UBUNTU-CVE-2024-31449
Also known as: BIT-keydb-2024-31449, BIT-valkey-2024-31449, GHSA-whxg-wx83-85p5, USN-8169-1

Charts affected

21 by stars

Chart

Latest

Affected images

Radar Score

difydouban

0.10.0

1 of 6 See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	redis@7.2.4-4 Redis (TM)@7.2.4-4	6.2.16 6.2.16

Open the chart page →

19,391

difydify-helm

0.38.0

1 of 11 See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.0.11-debian-11-r12	1161dcd293a0	redis@7.0.11-1	6.2.16

Open the chart page →

22,002

chatwootchatwoot

2.0.24

1 of 3 See more

chatwoot chatwoot 2.0.24

1 of the 3 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	redis@6.2.7-150	6.2.16

Open the chart page →

9,203

netris-controllernetrisai

2.8.2

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
netrisai/redis :6.0.12-debian-10-r3	a4c0140d1696	redis@6.0.12-0	6.2.16

Open the chart page →

30,326

baserowbaserow-chart

1.0.56

1 of 6 See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.5-debian-12-r0	5261cae9e407	redis@7.2.5-0 Redis(R)@7.2.5-0	6.2.16 6.2.16

Open the chart page →

17,263

convertigoconvertigo

8.4.3

1 of 5 See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	redis@5:7.0.15-1~deb12u1	5:7.0.15-1~deb12u2

Open the chart page →

17,404

cosmocosmo-platform

0.20.0

1 of 10 See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	redis@7.2.4-5 Redis(R)@7.2.4-5	6.2.16 6.2.16

Open the chart page →

28,839

thingsboard-clusterthingsboard-cluster-betta

0.2.26

1 of 6 See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.1-debian-11-r0	fa288394f402	redis@7.2.1-0 Redis (TM)@7.2.1	6.2.16 6.2.16

Open the chart page →

14,566

games-on-whalesgeek-cookbook

1.8.2

1 of 7 See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	lua-bitop@1.0.2-5	1.0.2-5ubuntu0.20.04.1~esm2

Open the chart page →

35,305

games-on-whalesangelnu

2.0.0

1 of 7 See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	lua-bitop@1.0.2-5	1.0.2-5ubuntu0.20.04.1~esm2

Open the chart page →

42,126

appwriteappwrite-helm

1.3.2

1 of 8 See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.0.10-debian-11-r0	59293f5206b7	redis@7.0.10-0	6.2.16

Open the chart page →

9,847

supportpalevilgn0me

0.1.6

1 of 1 See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	lua-bitop@1.0.2-5	1.0.2-5ubuntu0.20.04.1~esm2

Open the chart page →

20,933

bluesky-pdsijmacd

1.0.0

1 of 2 See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
arunvelsriram/utils :latest	655ad18fd8d6	redis@5:7.0.15-1ubuntu0.24.04.1	5:7.0.15-1ubuntu0.24.04.4

Open the chart page →

8,967

redisredis

0.1.1

1 of 1 See more

redis redis 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/bitnami/redis :6.0.8.9	e1e9cf5297a6	redis@6.0.8-0	6.2.16

Open the chart page →

1,594

redisredis-arm

17.8.0

1 of 1 See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	redis@7.0.8-1	6.2.16

Open the chart page →

1,906

reload-counterreload-counter

0.1.0

1 of 1 See more

reload-counter reload-counter 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
alaaamin/reload-count-tornado-py-app :v1.0.1alpine	46da5844794e	redis@6.2.7-r0	6.2.18-r0

Open the chart page →

1,009

chainrss3

0.1.28

1 of 8 See more

chain rss3 0.1.28

1 of the 8 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	redis@7.0.15-r0	7.0.15-r1

Open the chart page →

8,528

proxydrss3

0.1.0

1 of 1 See more

proxyd rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
rss3/proxyd :6edce9ddfeee0b00a2d98f24c3ce67885653651b	865a0a6bdf4c	redis@7.0.15-r0	7.0.15-r1

Open the chart page →

2,110

sagawisesagawise

0.1.0

1 of 3 See more

sagawise sagawise 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
venturenox/redis :latest	83b471c193ba	redis@7.4.1-1	6.2.16

Open the chart page →

4,178

redis-high-availabilitysomeblackmagic

1.3.10

1 of 3 See more

redis-high-availability someblackmagic 1.3.10

1 of the 3 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.0.8-debian-11-r0	bf01d031ba8c	redis@7.0.8-0	6.2.16

Open the chart page →

3,148

testing-multitoolsomeblackmagic

0.1.2

1 of 1 See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-31449.

Container image	Digest	Package	Fixed in
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	lua-bitop@1.0.2-5	1.0.2-5ubuntu0.20.04.1~esm2

Open the chart page →

30,687

Container images carrying it

20 by charts deploying them

A fixed version is listed for 6 of the 6 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	lua-bitop@1.0.2-5	1.0.2-5ubuntu0.20.04.1~esm2	2
alaaamin/reload-count-tornado-py-app :v1.0.1alpine	46da5844794e	redis@6.2.7-r0	6.2.18-r0	1
arunvelsriram/utils :latest	655ad18fd8d6	redis@5:7.0.15-1ubuntu0.24.04.1	5:7.0.15-1ubuntu0.24.04.4	1
baserow/baserow :1.30.1	df0c42eb67e8	redis@5:7.0.15-1~deb12u1	5:7.0.15-1~deb12u2	1
bitnamilegacy/redis :7.0.11-debian-11-r12	1161dcd293a0	redis@7.0.11-1	6.2.16	1
bitnamilegacy/redis :7.2.5-debian-12-r0	5261cae9e407	redis@7.2.5-0 Redis(R)@7.2.5-0	6.2.16 6.2.16	1
bitnamilegacy/redis :7.0.10-debian-11-r0	59293f5206b7	redis@7.0.10-0	6.2.16	1
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	redis@7.2.4-5 Redis(R)@7.2.4-5	6.2.16 6.2.16	1
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	redis@6.2.7-150	6.2.16	1
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	redis@7.2.4-4 Redis (TM)@7.2.4-4	6.2.16 6.2.16	1
bitnamilegacy/redis :7.0.8-debian-11-r0	bf01d031ba8c	redis@7.0.8-0	6.2.16	1
bitnamilegacy/redis :7.2.1-debian-11-r0	fa288394f402	redis@7.2.1-0 Redis (TM)@7.2.1	6.2.16 6.2.16	1
netrisai/redis :6.0.12-debian-10-r3	a4c0140d1696	redis@6.0.12-0	6.2.16	1
rss3/proxyd :6edce9ddfeee0b00a2d98f24c3ce67885653651b	865a0a6bdf4c	redis@7.0.15-r0	7.0.15-r1	1
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	redis@7.0.15-r0	7.0.15-r1	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	lua-bitop@1.0.2-5	1.0.2-5ubuntu0.20.04.1~esm2	1
venturenox/redis :latest	83b471c193ba	redis@7.4.1-1	6.2.16	1
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	redis@7.0.8-1	6.2.16	1
mcr.microsoft.com/oss/bitnami/redis :6.0.8.9	e1e9cf5297a6	redis@6.0.8-0	6.2.16	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	lua-bitop@1.0.2-5	1.0.2-5ubuntu0.20.04.1~esm2	1