Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-11219

Опубликовано: 13 июн. 2018
Источник: redhat
CVSS3: 6.3

Описание

An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 8redisNot affected
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)redisWill not fix
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) Operational ToolsredisWill not fix
Red Hat Fuse 7camel-spring-redisNot affected
Red Hat JBoss Fuse 6camel-spring-redisNot affected
Red Hat Mobile Application Platform 4rhmap-redis-dockerWill not fix
Red Hat OpenStack Platform 12 (Pike)redisWill not fix
Red Hat OpenStack Platform 8 (Liberty)redisWill not fix
Red Hat OpenStack Platform 8 (Liberty) Operational ToolsredisWill not fix
Red Hat OpenStack Platform 9 (Mitaka)redisWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-190
https://bugzilla.redhat.com/show_bug.cgi?id=1590062redis: Integer overflow in lua_struct.c:b_unpack()

6.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 8 лет назад

An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking.

CVSS3: 9.8
nvd
около 8 лет назад

An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking.

CVSS3: 9.8
debian
около 8 лет назад

An Integer Overflow issue was discovered in the struct library in the ...

CVSS3: 9.8
github
больше 4 лет назад

An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking.

CVSS3: 9.8
fstec
около 8 лет назад

Уязвимость библиотеки struct подсистемы Lua системы управления базами данных Redis, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

6.3 Medium

CVSS3