{"id":16524,"date":"2025-10-18T00:00:23","date_gmt":"2025-10-17T16:00:23","guid":{"rendered":"https:\/\/www.quape.com\/?p=16524"},"modified":"2025-10-18T00:02:25","modified_gmt":"2025-10-17T16:02:25","slug":"critical-redis-vulnerability-cve-2025-49844","status":"publish","type":"post","link":"https:\/\/www.quape.com\/vi\/critical-redis-vulnerability-cve-2025-49844\/","title":{"rendered":"L\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng c\u1ee7a Redis (CVE-2025-49844)"},"content":{"rendered":"<div id=\"bsf_rt_marker\"><\/div><div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-transparent ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">M\u1ee5c l\u1ee5c<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Chuy\u1ec3n \u0111\u1ed5i m\u1ee5c l\u1ee5c\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Chuy\u1ec3n \u0111\u1ed5i<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewbox=\"0 0 24 24\" version=\"1.2\" baseprofile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1' ><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.quape.com\/vi\/critical-redis-vulnerability-cve-2025-49844\/#Overview\" >T\u1ed5ng quan<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.quape.com\/vi\/critical-redis-vulnerability-cve-2025-49844\/#Impact\" >S\u1ef1 va ch\u1ea1m<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.quape.com\/vi\/critical-redis-vulnerability-cve-2025-49844\/#Affected_Versions\" >Phi\u00ean b\u1ea3n b\u1ecb \u1ea3nh h\u01b0\u1edfng<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.quape.com\/vi\/critical-redis-vulnerability-cve-2025-49844\/#Mitigation_and_Best_Practices\" >Gi\u1ea3m thi\u1ec3u v\u00e0 Th\u1ef1c h\u00e0nh T\u1ed1t nh\u1ea5t<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.quape.com\/vi\/critical-redis-vulnerability-cve-2025-49844\/#How_QUAPE_Protects_Our_Customers\" >QUAPE b\u1ea3o v\u1ec7 kh\u00e1ch h\u00e0ng c\u1ee7a ch\u00fang t\u00f4i nh\u01b0 th\u1ebf n\u00e0o<\/a><\/li><\/ul><\/nav><\/div>\n<h3 data-start=\"245\" data-end=\"261\"><span class=\"ez-toc-section\" id=\"Overview\"><\/span><strong data-start=\"249\" data-end=\"261\">T\u1ed5ng quan<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p data-start=\"262\" data-end=\"595\">Redis \u0111\u00e3 ph\u00e1t h\u00e0nh m\u1ed9t <strong data-start=\"283\" data-end=\"311\">c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt quan tr\u1ecdng<\/strong> \u0111\u1ec3 v\u00e1 m\u1ed9t l\u1ed7 h\u1ed5ng m\u1edbi \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n (<strong data-start=\"355\" data-end=\"373\">CVE-2025-49844<\/strong>) g\u00e2y ra m\u1ed1i \u0111e d\u1ecda nghi\u00eam tr\u1ecdng cho c\u00e1c m\u00e1y ch\u1ee7 ch\u1ea1y phi\u00ean b\u1ea3n Redis b\u1ecb \u1ea3nh h\u01b0\u1edfng.<br data-start=\"446\" data-end=\"449\" \/>L\u1ed7i n\u00e0y \u0111\u00e3 \u0111\u01b0\u1ee3c g\u00e1n m\u1ed9t <strong data-start=\"479\" data-end=\"515\">\u0110i\u1ec3m CVSS v3.1 l\u00e0 9,9 tr\u00ean 10<\/strong>, \u0111\u00e1nh d\u1ea5u \u0111\u00e2y l\u00e0 m\u1ed9t trong nh\u1eefng l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng nh\u1ea5t trong c\u00e1c b\u1ea3n ph\u00e1t h\u00e0nh Redis g\u1ea7n \u0111\u00e2y.<\/p>\n<hr data-start=\"597\" data-end=\"600\" \/>\n<h3 data-start=\"602\" data-end=\"616\"><span class=\"ez-toc-section\" id=\"Impact\"><\/span><strong data-start=\"606\" data-end=\"616\">S\u1ef1 va ch\u1ea1m<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p data-start=\"617\" data-end=\"926\">M\u1ed8T <strong data-start=\"620\" data-end=\"646\">k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 \u0111\u01b0\u1ee3c x\u00e1c th\u1ef1c<\/strong> c\u00f3 th\u1ec3 khai th\u00e1c l\u1ed7 h\u1ed5ng n\u00e0y b\u1eb1ng c\u00e1ch t\u1ea3i l\u00ean <strong data-start=\"695\" data-end=\"725\">k\u1ecbch b\u1ea3n \u0111\u01b0\u1ee3c t\u1ea1o ra m\u1ed9t c\u00e1ch \u00e1c \u00fd<\/strong>, c\u00f3 kh\u1ea3 n\u0103ng d\u1eabn \u0111\u1ebfn <strong data-start=\"750\" data-end=\"781\">th\u1ef1c thi m\u00e3 t\u1eeb xa (RCE)<\/strong> tr\u00ean m\u00e1y ch\u1ee7 Redis.<br data-start=\"800\" data-end=\"803\" \/>Khai th\u00e1c th\u00e0nh c\u00f4ng c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn <strong data-start=\"841\" data-end=\"864\">truy c\u1eadp tr\u00e1i ph\u00e9p<\/strong>, <strong data-start=\"866\" data-end=\"885\">x\u00e2m ph\u1ea1m d\u1eef li\u1ec7u<\/strong>, ho\u1eb7c th\u1eadm ch\u00ed l\u00e0 m\u1ed9t <strong data-start=\"897\" data-end=\"925\">ti\u1ebfp qu\u1ea3n to\u00e0n b\u1ed9 h\u1ec7 th\u1ed1ng<\/strong>.<\/p>\n<hr data-start=\"928\" data-end=\"931\" \/>\n<h3 data-start=\"933\" data-end=\"958\"><span class=\"ez-toc-section\" id=\"Affected_Versions\"><\/span><strong data-start=\"937\" data-end=\"958\">Phi\u00ean b\u1ea3n b\u1ecb \u1ea3nh h\u01b0\u1edfng<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p data-start=\"959\" data-end=\"1001\">C\u00e1c phi\u00ean b\u1ea3n Redis sau \u0111\u00e2y b\u1ecb \u1ea3nh h\u01b0\u1edfng:<\/p>\n<ul data-start=\"1003\" data-end=\"1267\">\n<li data-start=\"1003\" data-end=\"1113\">\n<p data-start=\"1005\" data-end=\"1033\"><strong data-start=\"1005\" data-end=\"1023\">Ph\u1ea7n m\u1ec1m Redis<\/strong> tr\u01b0\u1edbc:<\/p>\n<ul data-start=\"1036\" data-end=\"1113\">\n<li data-start=\"1036\" data-end=\"1049\">\n<p data-start=\"1038\" data-end=\"1049\">7.22.2-12<\/p>\n<\/li>\n<li data-start=\"1052\" data-end=\"1065\">\n<p data-start=\"1054\" data-end=\"1065\">7.8.6-207<\/p>\n<\/li>\n<li data-start=\"1068\" data-end=\"1081\">\n<p data-start=\"1070\" data-end=\"1081\">7.4.6-272<\/p>\n<\/li>\n<li data-start=\"1084\" data-end=\"1097\">\n<p data-start=\"1086\" data-end=\"1097\">7.2.4-138<\/p>\n<\/li>\n<li data-start=\"1100\" data-end=\"1113\">\n<p data-start=\"1102\" data-end=\"1113\">6.4.2-131<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li data-start=\"1114\" data-end=\"1208\">\n<p data-start=\"1116\" data-end=\"1159\"><strong data-start=\"1116\" data-end=\"1149\">Redis OSS \/ Phi\u00ean b\u1ea3n c\u1ed9ng \u0111\u1ed3ng<\/strong> tr\u01b0\u1edbc:<\/p>\n<ul data-start=\"1162\" data-end=\"1208\">\n<li data-start=\"1162\" data-end=\"1171\">\n<p data-start=\"1164\" data-end=\"1171\">8.2.2<\/p>\n<\/li>\n<li data-start=\"1174\" data-end=\"1183\">\n<p data-start=\"1176\" data-end=\"1183\">8.0.4<\/p>\n<\/li>\n<li data-start=\"1186\" data-end=\"1195\">\n<p data-start=\"1188\" data-end=\"1195\">7.4.6<\/p>\n<\/li>\n<li data-start=\"1198\" data-end=\"1208\">\n<p data-start=\"1200\" data-end=\"1208\">7.2.11<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li data-start=\"1209\" data-end=\"1267\">\n<p data-start=\"1211\" data-end=\"1236\"><strong data-start=\"1211\" data-end=\"1226\">Redis Stack<\/strong> tr\u01b0\u1edbc:<\/p>\n<ul data-start=\"1239\" data-end=\"1267\">\n<li data-start=\"1239\" data-end=\"1251\">\n<p data-start=\"1241\" data-end=\"1251\">7.4.0-v7<\/p>\n<\/li>\n<li data-start=\"1254\" data-end=\"1267\">\n<p data-start=\"1256\" data-end=\"1267\">7.2.0-v19<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<hr data-start=\"1269\" data-end=\"1272\" \/>\n<h3 data-start=\"1274\" data-end=\"1311\"><span class=\"ez-toc-section\" id=\"Mitigation_and_Best_Practices\"><\/span><strong data-start=\"1278\" data-end=\"1311\">Gi\u1ea3m thi\u1ec3u v\u00e0 Th\u1ef1c h\u00e0nh T\u1ed1t nh\u1ea5t<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p data-start=\"1312\" data-end=\"1485\">Ng\u01b0\u1eddi d\u00f9ng v\u00e0 qu\u1ea3n tr\u1ecb vi\u00ean Redis l\u00e0 <strong data-start=\"1347\" data-end=\"1389\">khuy\u1ebfn c\u00e1o m\u1ea1nh m\u1ebd n\u00ean c\u1eadp nh\u1eadt ngay l\u1eadp t\u1ee9c<\/strong> l\u00ean phi\u00ean b\u1ea3n v\u00e1 l\u1ed7i m\u1edbi nh\u1ea5t.<br data-start=\"1420\" data-end=\"1423\" \/>N\u1ebfu kh\u00f4ng th\u1ec3 n\u00e2ng c\u1ea5p, h\u00e3y \u00e1p d\u1ee5ng c\u00e1c bi\u1ec7n ph\u00e1p ph\u00f2ng ng\u1eeba sau:<\/p>\n<ul data-start=\"1487\" data-end=\"1665\">\n<li data-start=\"1487\" data-end=\"1551\">\n<p data-start=\"1489\" data-end=\"1551\">H\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp Redis v\u00e0o <strong data-start=\"1514\" data-end=\"1543\">m\u1ea1ng n\u1ed9i b\u1ed9 \u0111\u00e1ng tin c\u1eady<\/strong> ch\u1ec9 m\u1ed9t.<\/p>\n<\/li>\n<li data-start=\"1552\" data-end=\"1604\">\n<p data-start=\"1554\" data-end=\"1604\"><strong data-start=\"1554\" data-end=\"1591\">V\u00f4 hi\u1ec7u h\u00f3a ho\u1eb7c gi\u00e1m s\u00e1t vi\u1ec7c t\u1ea3i l\u00ean t\u1eadp l\u1ec7nh<\/strong> c\u1ea9n th\u1eadn.<\/p>\n<\/li>\n<li data-start=\"1605\" data-end=\"1665\">\n<p data-start=\"1607\" data-end=\"1665\">\u00d4n t\u1eadp <strong data-start=\"1614\" data-end=\"1639\">nh\u1eadt k\u00fd h\u1ec7 th\u1ed1ng v\u00e0 Redis<\/strong> cho c\u00e1c ho\u1ea1t \u0111\u1ed9ng b\u1ea5t th\u01b0\u1eddng.<\/p>\n<\/li>\n<\/ul>\n<hr data-start=\"1667\" data-end=\"1670\" \/>\n<h3 data-start=\"1672\" data-end=\"1712\"><span class=\"ez-toc-section\" id=\"How_QUAPE_Protects_Our_Customers\"><\/span><strong data-start=\"1676\" data-end=\"1712\">QUAPE b\u1ea3o v\u1ec7 kh\u00e1ch h\u00e0ng c\u1ee7a ch\u00fang t\u00f4i nh\u01b0 th\u1ebf n\u00e0o<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p data-start=\"1713\" data-end=\"2054\">T\u1ea1i <strong data-start=\"1716\" data-end=\"1725\">QUAPE<\/strong>, an ninh l\u00e0 \u01b0u ti\u00ean h\u00e0ng \u0111\u1ea7u c\u1ee7a ch\u00fang t\u00f4i.<br data-start=\"1756\" data-end=\"1759\" \/>\u0110\u1ec3 gi\u1ea3m thi\u1ec3u r\u1ee7i ro t\u1eeb vi\u1ec7c khai th\u00e1c b\u00ean ngo\u00e0i, <strong data-start=\"1805\" data-end=\"1856\">t\u1ea5t c\u1ea3 c\u00e1c c\u1ed5ng Redis b\u00ean ngo\u00e0i \u0111\u1ec1u b\u1ecb ch\u1eb7n theo m\u1eb7c \u0111\u1ecbnh<\/strong> tr\u00ean c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng l\u01b0u tr\u1eef c\u1ee7a ch\u00fang t\u00f4i.<br data-start=\"1887\" data-end=\"1890\" \/>D\u1ecbch v\u1ee5 Redis ch\u1ec9 c\u00f3 th\u1ec3 truy c\u1eadp th\u00f4ng qua <strong data-start=\"1929\" data-end=\"1958\">m\u1ea1ng n\u1ed9i b\u1ed9 \u0111\u01b0\u1ee3c b\u1ea3o m\u1eadt<\/strong> ho\u1eb7c <strong data-start=\"1962\" data-end=\"1999\">th\u00f4ng qua c\u00e1c k\u1ebft n\u1ed1i \u0111\u01b0\u1ee3c x\u00e1c th\u1ef1c<\/strong>, gi\u1ea3m \u0111\u00e1ng k\u1ec3 nguy c\u01a1 b\u1ecb t\u1ea5n c\u00f4ng ti\u1ec1m \u1ea9n.<\/p>\n<p data-start=\"2056\" data-end=\"2175\">Ch\u00fang t\u00f4i c\u0169ng \u0111\u00e3 x\u00e1c minh r\u1eb1ng t\u1ea5t c\u1ea3 c\u00e1c phi\u00ean b\u1ea3n Redis \u0111\u01b0\u1ee3c QUAPE qu\u1ea3n l\u00fd \u0111\u1ec1u <strong data-start=\"2124\" data-end=\"2152\">\u0111\u00e3 v\u00e1 v\u00e0 kh\u00f4ng b\u1ecb \u1ea3nh h\u01b0\u1edfng<\/strong> b\u1edfi l\u1ed7 h\u1ed5ng n\u00e0y.<\/p>\n<p data-start=\"2177\" data-end=\"2394\">\u0110\u1ed1i v\u1edbi nh\u1eefng kh\u00e1ch h\u00e0ng v\u1eadn h\u00e0nh m\u00e1y ch\u1ee7 Redis c\u1ee7a ri\u00eang m\u00ecnh, ch\u00fang t\u00f4i \u0111\u1eb7c bi\u1ec7t khuy\u00ean b\u1ea1n n\u00ean \u00e1p d\u1ee5ng ngay c\u00e1c b\u1ea3n c\u1eadp nh\u1eadt m\u1edbi nh\u1ea5t.<br data-start=\"2286\" data-end=\"2289\" \/>N\u1ebfu b\u1ea1n c\u1ea7n h\u1ed7 tr\u1ee3 x\u00e1c minh t\u00ednh b\u1ea3o m\u1eadt c\u1ee7a m\u00f4i tr\u01b0\u1eddng, nh\u00f3m k\u1ef9 thu\u1eadt c\u1ee7a ch\u00fang t\u00f4i lu\u00f4n s\u1eb5n s\u00e0ng tr\u1ee3 gi\u00fap.<\/p>\n<hr data-start=\"2396\" data-end=\"2399\" \/>\n<p data-start=\"2401\" data-end=\"2492\">\ud83d\udcd8 <strong data-start=\"2404\" data-end=\"2418\">Th\u1ea9m quy\u1ec1n gi\u1ea3i quy\u1ebft:<\/strong><br data-start=\"2418\" data-end=\"2421\" \/>https:\/\/redis.io\/blog\/security-advisory-cve-2025-49844\/<\/p>","protected":false},"excerpt":{"rendered":"<p>Overview Redis has released a critical security update to patch a newly discovered vulnerability (CVE-2025-49844) that poses a serious threat to servers running affected Redis versions.This flaw has been assigned a CVSS v3.1 score of 9.9 out of 10, marking it as one of the most severe vulnerabilities in recent Redis releases. Impact An authenticated [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":16527,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[93],"tags":[],"class_list":["post-16524","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/www.quape.com\/vi\/wp-json\/wp\/v2\/posts\/16524","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.quape.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.quape.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.quape.com\/vi\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.quape.com\/vi\/wp-json\/wp\/v2\/comments?post=16524"}],"version-history":[{"count":0,"href":"https:\/\/www.quape.com\/vi\/wp-json\/wp\/v2\/posts\/16524\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.quape.com\/vi\/wp-json\/wp\/v2\/media\/16527"}],"wp:attachment":[{"href":"https:\/\/www.quape.com\/vi\/wp-json\/wp\/v2\/media?parent=16524"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.quape.com\/vi\/wp-json\/wp\/v2\/categories?post=16524"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.quape.com\/vi\/wp-json\/wp\/v2\/tags?post=16524"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}