Описание
Security update for redis
This update for redis fixes the following security issue:
- CVE-2015-8080: Fixed an integer overflow resulting in stack-based overflow. (bsc#954199)
Список пакетов
openSUSE Leap 42.1
redis-3.0.4-3.1
Ссылки
- E-Mail link for openSUSE-SU-2016:1444-1
- SUSE Security Ratings
Описание
Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.
Затронутые продукты
openSUSE Leap 42.1:redis-3.0.4-3.1
Ссылки
- CVE-2015-8080
- SUSE Bug 1173018
- SUSE Bug 954199