[SECURITY] [DSA 4731-1] redis security update

🗓️ 19 Jul 2020 19:30:52Reported by DebianType

debian

debian🔗 lists.debian.org👁 30 Views

Debian Security Advisory for Redis update - CVE-2020-14147 integer overflow stack-based buffer overflow leading to denial of service

Reporter	Title	Published	Views	Family All 95
IBM Security Bulletins	Security Bulletin: Possible denial of service attack affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	3 Aug 202016:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Redis, MinIO, Golang, and Urllib3 affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and OpenShift	28 Jun 202120:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by a Redis vulnerability (CVE-2020-14147)	26 Sep 202019:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway is potentially vulnerable to a Denial of Service (CVE-2020-14147)	8 Jun 202122:33	–	ibm
IBM Security Bulletins	Security Bulletin: Version 5.0.5 of Redis included in IBM Netcool Operations Insight 1.6.1.x has a security vulnerability (CVE-2020-14147)	29 Sep 202013:31	–	ibm
AlpineLinux	CVE-2020-14147	15 Jun 202016:52	–	alpinelinux
BDU FSTEC	The vulnerability of the getnum() function implementation in the NoSQL Redis database management system allows a attacker to cause a service failure or execute arbitrary code.	8 Feb 202100:00	–	bdu_fstec
CBLMariner	CVE-2020-14147 affecting package redis 5.0.5-7	30 Nov 202019:30	–	cbl_mariner
CBLMariner	CVE-2020-14147 affecting package redis for versions less than 5.0.5-7	9 Apr 202206:51	–	cbl_mariner
CNVD	Redis Labs Redis Input Validation Error Vulnerability	16 Jun 202000:00	–	cnvd

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	10	mips64el	redis-server	5.0.3-4+deb10u2	redis-server_5.0.3-4+deb10u2_mips64el.deb
Debian	10	ppc64el	redis-tools-dbgsym	5.0.3-4+deb10u2	redis-tools-dbgsym_5.0.3-4+deb10u2_ppc64el.deb
Debian	10	amd64	redis-sentinel	5.0.3-4+deb10u2	redis-sentinel_5.0.3-4+deb10u2_amd64.deb
Debian	10	i386	redis-server	5.0.3-4+deb10u2	redis-server_5.0.3-4+deb10u2_i386.deb
Debian	10	armhf	redis-tools	5.0.3-4+deb10u2	redis-tools_5.0.3-4+deb10u2_armhf.deb
Debian	10	mips	redis-tools	5.0.3-4+deb10u2	redis-tools_5.0.3-4+deb10u2_mips.deb
Debian	10	ppc64el	redis-server	5.0.3-4+deb10u2	redis-server_5.0.3-4+deb10u2_ppc64el.deb
Debian	10	s390x	redis-tools	5.0.3-4+deb10u2	redis-tools_5.0.3-4+deb10u2_s390x.deb
Debian	10	armel	redis-tools-dbgsym	5.0.3-4+deb10u2	redis-tools-dbgsym_5.0.3-4+deb10u2_armel.deb
Debian	10	ppc64el	redis-tools	5.0.3-4+deb10u2	redis-tools_5.0.3-4+deb10u2_ppc64el.deb

19 Jul 2020 19:30Current

2.2Low risk

Vulners AI Score2.2

EPSS0.03085

debian redis update cve-2020-14147 integer overflow buffer overflow denial of service security advisory