Detections
Analytics
CVE-2018-11219
critical
Description
An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking.
References
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
https://www.debian.org/security/2018/dsa-4230
https://security.gentoo.org/glsa/201908-04
https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTES
https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES
https://github.com/antirez/redis/issues/5017
https://github.com/antirez/redis/commit/e89086e09a38cc6713bcd4b9c29abf92cf393936
https://github.com/antirez/redis/commit/1eb08bcd4634ae42ec45e8284923ac048beaa4c3
https://access.redhat.com/errata/RHSA-2019:1860
https://access.redhat.com/errata/RHSA-2019:0094