An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

🗓️ 18 Aug 2020 00:00:00Reported by MicrosoftType

Redis before 6.0.3 has an overflow in getnum (lua_struct.c) that can crash or corrupt memory via large Lua input.

Reporter	Title	Published	Views	Family All 135
IBM Security Bulletins	Security Bulletin: Possible denial of service attack affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	3 Aug 202016:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Redis, MinIO, Golang, and Urllib3 affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and OpenShift	28 Jun 202120:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by a Redis vulnerability (CVE-2020-14147)	26 Sep 202019:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway is potentially vulnerable to a Denial of Service (CVE-2020-14147)	8 Jun 202122:33	–	ibm
IBM Security Bulletins	Security Bulletin: Version 5.0.5 of Redis included in IBM Netcool Operations Insight 1.6.1.x has a security vulnerability (CVE-2020-14147)	29 Sep 202013:31	–	ibm
AlpineLinux	CVE-2015-8080	13 Apr 201615:00	–	alpinelinux
AlpineLinux	CVE-2020-14147	15 Jun 202016:52	–	alpinelinux
CBLMariner	CVE-2020-14147 affecting package redis 5.0.5-7	30 Nov 202019:30	–	cbl_mariner
CBLMariner	CVE-2020-14147 affecting package redis for versions less than 5.0.5-7	9 Apr 202206:51	–	cbl_mariner
CNVD	Redis 'getnum' function integer overflow vulnerability	16 Apr 201600:00	–	cnvd