An integer overflow bug in Redis version 6.0 or newer could be exploited using the STRALGO LCS command to corrupt the heap and potentially result in remote code execution. The integer overflow bug exists in all versions of Redis starting with 6.0.Integer overflow in COPY command for large intsets. The issue is fixed in Redis version 6.2.3.
An integer overflow bug in Redis version 6.0 or newer could be exploited using the STRALGO LCS command to corrupt the heap and potentially result in remote code execution. The integer overflow bug exists in all versions of Redis starting with 6.0.Integer overflow in COPY command for large intsets. The issue is fixed in Redis version 6.2.3.
https://groups.google.com/g/redis-db/c/6GSWzTW0PR8/m/8FbdIEEoBAAJ https://github.com/redis/redis/commit/92e3b1802f72ca0c5b0bde97f01d9b57a758d85c
Vulmon