THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2025-29923 (LOW 3.7) — go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.2, go-redis potentially responds out of order when `CLIENT SETINFO` times out during connection establishment. This can happen when the client is configured to transmit i

[NVD] CVE-2025-29923 (LOW 3.7) — go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.2, go-redis potentially responds out of order when `CLIENT SETINFO` times out during connection establishment. This can happen when the client is configured to transmit i

lownvdPublished 2025-03-20

CVE-2025-29923 CVSS: 3.7 LOW Published: 2025-03-20T18:15:19.230

go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.2, go-redis potentially responds out of order when `CLIENT SETINFO` times out during connection establishment. This can happen when the client is configured to transmit its identity, there are network connectivity issues, or

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-29923