p PatchFirst

CVE-2018-11219

CVE-2018-11219

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking.

CVSS 9.8 · Critical · EPSS 6.7% · Fix available

Published
Updated

Stack: system · database

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • redis Debian:12

    Affected ranges
    • ECOSYSTEM: < 5:4.0.10-1

    Update to 5:4.0.10-1

  • redis Debian:13

    Affected ranges
    • ECOSYSTEM: < 5:4.0.10-1

    Update to 5:4.0.10-1

  • redis Debian:14

    Affected ranges
    • ECOSYSTEM: < 5:4.0.10-1

    Update to 5:4.0.10-1

  • redis Ubuntu:14.04:LTS

    Versions
    • 2:2.6.13-1
    • 2:2.6.16-3
    • 2:2.8.0-1
    • 2:2.8.2-1
    • 2:2.8.4-2
    Affected ranges
    • ECOSYSTEM: < 2:2.8.4-2ubuntu0.2

    Update to 2:2.8.4-2ubuntu0.2

  • redis Ubuntu:16.04:LTS

    Versions
    • 2:3.0.3-3
    • 2:3.0.5-1
    • 2:3.0.5-2
    • 2:3.0.5-3
    • 2:3.0.5-4
    • 2:3.0.6-1
    Affected ranges
    • ECOSYSTEM: < 2:3.0.6-1ubuntu0.2

    Update to 2:3.0.6-1ubuntu0.2

  • redis Ubuntu:18.04:LTS

    Versions
    • 4:4.0.1-7
    • 4:4.0.2-6
    • 4:4.0.2-9
    • 5:4.0.5-1
    • 5:4.0.6-1
    • 5:4.0.6-2
    • 5:4.0.7-1
    • 5:4.0.8-1
    • 5:4.0.8-2
    • 5:4.0.9-1
    Affected ranges
    • ECOSYSTEM: < 5:4.0.9-1ubuntu0.1

    Update to 5:4.0.9-1ubuntu0.1

Original sources

Check your server →