PT-2018-2776 · Redis+2 · Redis+2
Publicado
2018-06-13
·
Atualizado
2021-08-04
·
CVE-2018-11219
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Redis versions prior to 3.2.12
Redis versions 4.x prior to 4.0.10
Redis versions 5.x prior to 5.0 RC2
Description
An Integer Overflow issue was discovered in the struct library in the Lua subsystem, leading to a failure of bounds checking. This issue may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations
For Redis versions prior to 3.2.12, update to version 3.2.12 or later.
For Redis versions 4.x prior to 4.0.10, update to version 4.0.10 or later.
For Redis versions 5.x prior to 5.0 RC2, update to version 5.0 RC2 or later.
Exploit
Correção
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Redis
Suse