Oran Agra 757f8f771e Prevent unauthenticated client from easily consuming lots of memory (CVE-2021-32675)
This change sets a low limit for multibulk and bulk length in the
protocol for unauthenticated connections, so that they can't easily
cause redis to allocate massive amounts of memory by sending just a few
characters on the network.
The new limits are 10 arguments of 16kb each (instead of 1m of 512mb)
2021-10-04 13:59:40 +03:00
..
2020-03-23 12:02:12 +01:00
2021-01-23 21:53:58 +02:00
2021-02-04 19:39:07 +02:00
2015-10-09 09:47:17 +02:00
2010-10-15 12:54:53 +02:00
2021-01-17 15:48:48 +02:00
2021-01-17 15:48:48 +02:00