CVE-2015-8080

2016-04-1315:59:00

Alpine Linux Development Team

security.alpinelinux.org

0.827 High

EPSS

Percentile

98.4%

JSON

Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchredis< 5.0.8-r0UNKNOWN
Alpine3.10-mainnoarchredis< 5.0.5-r1UNKNOWN
Alpine3.11-mainnoarchredis< 5.0.7-r1UNKNOWN
Alpine3.12-mainnoarchredis< 5.0.8-r0UNKNOWN
Alpine3.13-mainnoarchredis< 5.0.8-r0UNKNOWN
Alpine3.14-mainnoarchredis< 5.0.8-r0UNKNOWN
Alpine3.15-mainnoarchredis< 5.0.8-r0UNKNOWN
Alpine3.16-mainnoarchredis< 5.0.8-r0UNKNOWN
Alpine3.17-mainnoarchredis< 5.0.8-r0UNKNOWN
Alpine3.18-mainnoarchredis< 5.0.8-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	redis	< 5.0.8-r0	UNKNOWN
Alpine	3.10-main	noarch	redis	< 5.0.5-r1	UNKNOWN
Alpine	3.11-main	noarch	redis	< 5.0.7-r1	UNKNOWN
Alpine	3.12-main	noarch	redis	< 5.0.8-r0	UNKNOWN
Alpine	3.13-main	noarch	redis	< 5.0.8-r0	UNKNOWN
Alpine	3.14-main	noarch	redis	< 5.0.8-r0	UNKNOWN
Alpine	3.15-main	noarch	redis	< 5.0.8-r0	UNKNOWN
Alpine	3.16-main	noarch	redis	< 5.0.8-r0	UNKNOWN
Alpine	3.17-main	noarch	redis	< 5.0.8-r0	UNKNOWN
Alpine	3.18-main	noarch	redis	< 5.0.8-r0	UNKNOWN