Important: Red Hat Security Advisory: rh-redis32-redis security update

🗓️ 25 Jul 2019 16:10:02Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 116 Views

Redis security update with heap buffer overflow, heap corruption, integer overflow, and code executio

Reporter	Title	Published	Views	Family All 211
0day.today	Redis-cli < 5.0 - Buffer Overflow Exploit	19 Jun 201800:00	–	zdt
ALT Linux	Security fix for the ALT Linux 8 package redis version 3.0.7-alt2	27 Nov 201900:00	–	altlinux
AlpineLinux	CVE-2018-11218	17 Jun 201817:00	–	alpinelinux
AlpineLinux	CVE-2018-11219	17 Jun 201817:00	–	alpinelinux
AlpineLinux	CVE-2019-10192	11 Jul 201918:30	–	alpinelinux
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities In Redis affects Watson Studio Local (CVE-2018-12453, CVE-2018-12326, CVE-2018-11218)	20 Dec 201913:49	–	ibm
BDU FSTEC	The vulnerability of the struct library in the Lua subsystem of the Redis database management system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	16 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cmsgpack library in the Lua subsystem of the Redis database management system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	16 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HyperLogLog algorithm in a resident database management system for NoSQL Redis lies in the fact that the output of the operation may exceed the buffer limits in memory. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.	16 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.	16 Oct 201900:00	–	bdu_fstec

Source	Link
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

21 Nov 2025 18:09Current

7.5High risk

Vulners AI Score7.5

CVSS 27.5

CVSS 37.2 - 9.8

CVSS 3.17.2

EPSS0.83

redis security update heap buffer overflow heap corruption integer overflow code execution cvss score cve-2019-10192 cve-2018-11218 cve-2018-11219 cve-2018-12326 data-structure server in-memory data.