AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2025-29923.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSLOW / 3.7No severity score in this snapshot.
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSMicrosoft vendor recordModified Aug 10, 2026

Disclosure summary

go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment

Source-reported weakness categories

CWE-20

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

Microsoft Security Updates (CVRF) · 2025-Mar

Open original source · Updated Aug 10, 2026

go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment

Maximum of vendor-reported product scores; products and fixed builds are associations, not a universal affected-version statement.

Microsoft maximum product score: 3.7

VendorProduct / associationVersion / bounds
Microsoft update guideazl3 telegraf 1.31.0-10 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guideazl3 telegraf 1.31.0-11 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guideazl3 telegraf 1.31.0-12 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guideazl3 telegraf 1.31.0-17 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guideazl3 telegraf 1.31.0-19 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guideazl3 telegraf 1.31.0-22 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guideazl3 telegraf 1.31.0-23 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guideazl3 keda 2.14.1-5 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guideazl3 keda 2.14.1-7 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guideazl3 telegraf 1.31.0-15 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guideazl3 telegraf 1.31.0-27 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guideazl3 telegraf 1.31.0-28 on Azure Linux 3.0 (MSRC status code 3)

Vendor remediation references

  • CBL-Mariner Releases · build 1.31.0-24 · product IDs 21481-17084
  • Vendor guidance · product IDs 21481-17084
  • CBL-Mariner Releases · build 2.14.1-5 · product IDs 19414-17084, 19347-17084
  • Vendor guidance · product IDs 19414-17084, 19347-17084
  • CBL-Mariner Releases · build 1.31.0-27 · product IDs 21631-17084, 21693-17084
  • Vendor guidance · product IDs 21631-17084, 21693-17084

Original records & references

PUBLISHED 2025-03-31T20:00:00-04:00
MODIFIED 2026-08-10T10:42:02-04:00
INGESTED 2026-10-08T12:50:09-04:00