redis:5 security update

2019-08-1900:00:00

linux.oracle.com

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

JSON

[5.0.3-2]

fix Heap buffer overflow in HyperLogLog triggered by malicious client
CVE-2019-10192
fix Stack buffer overflow in HyperLogLog triggered by malicious client
CVE-2019-10193

OSVersionArchitecturePackageVersionFilename
oracle linux8srcredis< 5.0.3-2.moduleredis-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.src.rpm
oracle linux8aarch64redis< 5.0.3-2.moduleredis-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.aarch64.rpm
oracle linux8aarch64redis-devel< 5.0.3-2.moduleredis-devel-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.aarch64.rpm
oracle linux8noarchredis-doc< 5.0.3-2.moduleredis-doc-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.noarch.rpm
oracle linux8srcredis< 5.0.3-2.moduleredis-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.src.rpm
oracle linux8x86_64redis< 5.0.3-2.moduleredis-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.x86_64.rpm
oracle linux8x86_64redis-devel< 5.0.3-2.moduleredis-devel-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.x86_64.rpm
oracle linux8noarchredis-doc< 5.0.3-2.moduleredis-doc-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	redis	< 5.0.3-2.module	redis-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.src.rpm
oracle linux	8	aarch64	redis	< 5.0.3-2.module	redis-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.aarch64.rpm
oracle linux	8	aarch64	redis-devel	< 5.0.3-2.module	redis-devel-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.aarch64.rpm
oracle linux	8	noarch	redis-doc	< 5.0.3-2.module	redis-doc-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.noarch.rpm
oracle linux	8	src	redis	< 5.0.3-2.module	redis-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.src.rpm
oracle linux	8	x86_64	redis	< 5.0.3-2.module	redis-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.x86_64.rpm
oracle linux	8	x86_64	redis-devel	< 5.0.3-2.module	redis-devel-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.x86_64.rpm
oracle linux	8	noarch	redis-doc	< 5.0.3-2.module	redis-doc-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.noarch.rpm