CVE Catalog
CVE-2017-15047
CriticalSummary
The clusterLoadConfig function in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) by leveraging 'limited access to the machine'.
Risk Assessment
The organization may experience service outages in Redis, potentially leading to data loss or operational disruptions.
Recommendation
It is recommended to update Redis to the latest version to mitigate this vulnerability and restrict access to the Redis server to trusted users.
Original NVD description (English source)
The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging "limited access to the machine."