String pattern matching had exponential time complexity on pathological...
String pattern matching had exponential time complexity on pathological patterns (CVE-2022-36021) (#11858)
Authenticated users can use string matching commands with a
specially crafted pattern to trigger a denial-of-service attack on Redis,
causing it to hang and consume 100% CPU time.
Co-authored-by:
Tom Levy <tomlevy93@gmail.com>
Please register or sign in to comment