CVE-2017-15047: Buffer Overflow
The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging "limited access to the machine."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15047?
CVE-2017-15047 is classified as a denial of service vulnerability that can lead to application crashes.
How do I fix CVE-2017-15047?
To fix CVE-2017-15047, upgrade Redis to a version later than 4.0.2 that addresses this vulnerability.
What are the implications of CVE-2017-15047?
CVE-2017-15047 allows attackers with limited access to the machine to cause application crashes and may lead to other unspecified issues.
In which version of Redis is CVE-2017-15047 found?
CVE-2017-15047 is specifically found in Redis version 4.0.2.
How can I check if my Redis installation is vulnerable to CVE-2017-15047?
You can check if your Redis installation is vulnerable to CVE-2017-15047 by verifying if it is running version 4.0.2.