Redis CVE-2025-49844: Use-After-Free may lead to remote code execution • Hacker News Board

Re: Redis CVE-2025-49844: Use-After-Free may lead to remote code execution

#11

Post by jacquesm » Tue, Oct 07, 2025, 11:50 AM UTC

DarkNova6 wrote: post #8

And this is why we need memory safety languages.

Your last three comments are more or less exactly the same thing.

Re: Redis CVE-2025-49844: Use-After-Free may lead to remote code execution

#12

Post by cindyllm » Tue, Oct 07, 2025, 11:57 AM UTC

jacquesm wrote: post #11

DarkNova6 wrote: post #8

And this is why we need memory safety languages.

Your last three comments are more or less exactly the same thing.

[dead]

Re: Redis CVE-2025-49844: Use-After-Free may lead to remote code execution

#13

Post by benmmurphy » Tue, Oct 07, 2025, 1:25 PM UTC

jijji wrote: post #3

most people use redis on localhost (i hope)

it used to possible to execute redis commands against localhost from the web browser using domain rebinding. but i think redis did something to the protocol to fix this. also, this is only really relevant for developers.

Re: Redis CVE-2025-49844: Use-After-Free may lead to remote code execution

#14

Post by styluss » Wed, Oct 08, 2025, 6:44 AM UTC

jijji wrote: post #3

most people use redis on localhost (i hope)

52,874 are connected to the internet according to Shodan.https://www.shodan.io/search?query=redis+product%3A%22Redis+... Not affiliated with them.

Re: Redis CVE-2025-49844: Use-After-Free may lead to remote code execution

#15

Post by DarkNova6 » Wed, Oct 08, 2025, 11:51 AM UTC

jacquesm wrote: post #11

DarkNova6 wrote: post #8

And this is why we need memory safety languages.

Your last three comments are more or less exactly the same thing.

Thank you for showing interest in my profile.

As you see you can’t fault me for being consistent, can you?