Lucene search

K
redhatRedHatRHSA-2016:0095
HistoryFeb 01, 2016 - 8:57 p.m.

(RHSA-2016:0095) Moderate: redis security advisory

2016-02-0120:57:18
access.redhat.com
16

0.827 High

EPSS

Percentile

98.4%

Redis is an advanced key-value store. It is often referred to as a data
structure server because keys can contain strings, hashes, lists, sets, or
sorted sets.

An integer-wraparound flaw leading to a stack-based overflow was found in
Redis. A user with access to run Lua code in a Redis session could possibly
use this flaw to crash the server (denial of service) or gain code
execution outside of the Lua sandbox. (CVE-2015-8080)

All users of redis are advised to upgrade to these updated packages, which
correct this issue.