• Oran Agra's avatar
    Fix heap overflow vulnerability in XAUTOCLAIM (CVE-2022-35951) · fa6815e1
    Oran Agra authored
    Executing an XAUTOCLAIM command on a stream key in a specific state, with a
    specially crafted COUNT argument may cause an integer overflow, a subsequent
    heap overflow, and potentially lead to remote code execution.
    The problem affects Redis versions 7.0.0 or newer.
    fa6815e1
t_stream.c 156 KB