Improper handling of exceptions in Apache bRPC

A security vulnerability exists in Apache bRPC versions prior to 1.18.0. It arises because the Redis service command parser accepts an empty RESP array as a command header. A remote unauthenticated attacker can send an empty array header along with subsequent bulk strings to a bRPC server running...