[SECURITY] [DLA DLA-1396-1] redis security update

🗓️ 26 Jun 2018 16:07:53Reported by DebianType

Security update for redis version 2:2.8.17-1+deb8u6 addressing multiple vulnerabilities including heap corruption, integer overflow, and buffer overflow

Reporter	Title	Published	Views	Family All 103
0day.today	Redis-cli < 5.0 - Buffer Overflow Exploit	19 Jun 201800:00	–	zdt
AlpineLinux	CVE-2018-11218	17 Jun 201817:00	–	alpinelinux
AlpineLinux	CVE-2018-11219	17 Jun 201817:00	–	alpinelinux
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities In Redis affects Watson Studio Local (CVE-2018-12453, CVE-2018-12326, CVE-2018-11218)	20 Dec 201913:49	–	ibm
BDU FSTEC	The vulnerability of the struct library in the Lua subsystem of the Redis database management system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	16 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cmsgpack library in the Lua subsystem of the Redis database management system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	16 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the redis-cli interface of the Redis database management system allows attackers to access confidential data, compromise its integrity, and cause service failures.	30 Jun 202300:00	–	bdu_fstec
Circl	CVE-2018-11218	29 Mar 202001:12	–	circl
CNVD	redis-cli buffer overflow vulnerability	19 Jun 201800:00	–	cnvd
CNVD	Redis Lua Subsystem Numeric Error Vulnerability	3 Jul 201800:00	–	cnvd