Vulnerability Spotlight: Redis CONFIG SET client-output-buffer-limit Code Execution Vulnerability
Summary: Cisco Talos disclosed a Redis vulnerability in the parsing of the `client-output-buffer-limit` configuration option, where `getClientTypeByName` can return a value in the range [-1, 3] against a `client_obuf_limits` array sized 3. Supplying a client type of `master`, which is valid but not among the expected `normal`, `slave`, and `pubsub` types, overflows the array and overwrites subsequent structure variables, and the vulnerability can result in remote code execution.
Why it matters: A single configuration directive that accepts a valid-but-unexpected client type is enough to overwrite adjacent memory and open the door to remote code execution on Redis, so any instance where clients can influence `client-output-buffer-limit` deserves scrutiny.
Read the original at Cisco Talos ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026The Last List of 2009 - Predicting Security in 2010 Cyber Risks ·