A vulnerability in the Redis DBMS potentially allowing code execution
A corrective release of the Redis database management system 7.0.5 has been published, which addresses a vulnerability (CVE-2022-35951) that potentially allows an attacker to execute their code with the Redis process's permissions. The issue only affects the 7.x branch and requires access to execute queries for the attack to take place. The vulnerability is caused by an integer overflow occurring when an invalid value for the 'COUNT' parameter is specified in the 'XAUTOCLAIM' command. When used in the context of stream keys […]
