The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging limited access to the machine. https://nvd.nist.gov/vuln/detail/CVE-2017-15047
