Redis is vulnerable to denial of service. The vulnerability exists due to a lack of validation of overflow check before calling the calloc() heap allocation function which causes an integer overflow when parsing specially crafted large multi-bulk network replies.
github.com/redis/redis/commit/0215324a66af949be39b34be2d55143232c1cb71
github.com/redis/redis/security/advisories/GHSA-833w-8v3m-8wwr
lists.fedoraproject.org/archives/list/[email protected]/message/HTYQ5ZF37HNGTZWVNJD3VXP7I6MEEF42/
lists.fedoraproject.org/archives/list/[email protected]/message/VL5KXFN3ATM7IIM7Q4O4PWTSRGZ5744Z/
lists.fedoraproject.org/archives/list/[email protected]/message/WR5WKJWXD4D6S3DJCZ56V74ESLTDQRAB/
secdb.alpinelinux.org/edge/main.yaml
secdb.alpinelinux.org/v3.11/main.yaml
secdb.alpinelinux.org/v3.12/main.yaml
secdb.alpinelinux.org/v3.13/main.yaml
secdb.alpinelinux.org/v3.14/main.yaml
security.gentoo.org/glsa/202209-17
security.netapp.com/advisory/ntap-20211104-0003/
www.debian.org/security/2021/dsa-5001
www.oracle.com/security-alerts/cpuapr2022.html