Описание
Potential heap overflow in Redis 7.0 XAUTOCLAIM command.
Impact
A specially crafted XAUTOCLAIM command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. The problem affects Redis versions 7.0.0 or newer.
Patches
The problem is fixed in Redis version 7.0.4.
For more information
If you have any questions or comments about this advisory:
- Open an issue in the Redis repository
- Email us at redis@redis.io
Пакеты
redis
>= 7.0.0
7.0.4
Связанные уязвимости
Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version 7.0.4.
Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version 7.0.4.
Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version 7.0.4.
Redis is an in-memory database that persists on disk. A specially craf ...