Lucene search
K

71 matches found

OSV
OSV
added 2021/06/22 11:15 a.m.0 views

CVE-2021-0557

In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179046129...

8.8CVSS7.9AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2020/04/07 11:11 p.m.19 views

CVE-2019-10193

A stack buffer overflow vulnerability was found in the Redis HyperLogLog data structure. By corrupting a HyperLogLog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past the end of a stack-allocated buffer...

7.2CVSS3.1AI score0.33071EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2019/12/14 4:52 a.m.16 views

CVE-2019-10192

A heap buffer overflow vulnerability was found in the Redis HyperLogLog data structure. By carefully corrupting a HyperLogLog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding into writing up to 3 bytes beyond the end of a heap-allocated buffer...

7.2CVSS2.2AI score0.22307EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2019/09/04 12:15 p.m.3 views

redis: Heap buffer overflow in HyperLogLog triggered by malicious client

A heap buffer overflow vulnerability was found in the Redis HyperLogLog data structure. By carefully corrupting a HyperLogLog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding into writing up to 3 bytes beyond the end of a heap-allocated buffer...

7.2CVSS5.9AI score0.22307EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2019/09/04 9:15 a.m.2 views

redis: Heap buffer overflow in HyperLogLog triggered by malicious client

A heap buffer overflow vulnerability was found in the Redis HyperLogLog data structure. By carefully corrupting a HyperLogLog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding into writing up to 3 bytes beyond the end of a heap-allocated buffer...

7.2CVSS5.9AI score0.22307EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2019/08/15 4:3 p.m.2 views

redis: Heap buffer overflow in HyperLogLog triggered by malicious client

A heap buffer overflow vulnerability was found in the Redis HyperLogLog data structure. By carefully corrupting a HyperLogLog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding into writing up to 3 bytes beyond the end of a heap-allocated buffer...

7.2CVSS5.9AI score0.22307EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2019/08/15 4:2 p.m.5 views

redis: Heap buffer overflow in HyperLogLog triggered by malicious client

A heap buffer overflow vulnerability was found in the Redis HyperLogLog data structure. By carefully corrupting a HyperLogLog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding into writing up to 3 bytes beyond the end of a heap-allocated buffer...

7.2CVSS5.9AI score0.22307EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2019/08/07 10:53 a.m.3 views

redis: Stack buffer overflow in HyperLogLog triggered by malicious client

A stack buffer overflow vulnerability was found in the Redis HyperLogLog data structure. By corrupting a HyperLogLog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past the end of a stack-allocated buffer...

7.2CVSS5.9AI score0.33071EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2019/08/07 10:53 a.m.2 views

redis: Heap buffer overflow in HyperLogLog triggered by malicious client

A heap buffer overflow vulnerability was found in the Redis HyperLogLog data structure. By carefully corrupting a HyperLogLog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding into writing up to 3 bytes beyond the end of a heap-allocated buffer...

7.2CVSS5.9AI score0.22307EPSS
Exploits0References7
Veracode
Veracode
added 2019/07/29 12:8 a.m.24 views

Arbitrary Code Execution

redis is vulnerable to arbitrary code execution. A heap-based buffer overflow with corrupted hyperloglog data structure allows an attacker to execute arbitrary code by carefully corrupting a hyperloglog structure using the SETRANGE command to trick the interpretation of dense HLL encoding to writ...

7.2CVSS3.8AI score0.22307EPSS
Exploits0References18Affected Software2
RedHat Linux
RedHat Linux
added 2019/07/25 4:10 p.m.1 views

redis: Heap buffer overflow in HyperLogLog triggered by malicious client

A heap buffer overflow vulnerability was found in the Redis HyperLogLog data structure. By carefully corrupting a HyperLogLog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding into writing up to 3 bytes beyond the end of a heap-allocated buffer...

7.2CVSS5.9AI score0.22307EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2019/07/22 1:36 p.m.3 views

redis: Stack buffer overflow in HyperLogLog triggered by malicious client

A stack buffer overflow vulnerability was found in the Redis HyperLogLog data structure. By corrupting a HyperLogLog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past the end of a stack-allocated buffer...

7.2CVSS5.9AI score0.33071EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2019/07/22 1:36 p.m.2 views

redis: Heap buffer overflow in HyperLogLog triggered by malicious client

A heap buffer overflow vulnerability was found in the Redis HyperLogLog data structure. By carefully corrupting a HyperLogLog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding into writing up to 3 bytes beyond the end of a heap-allocated buffer...

7.2CVSS5.9AI score0.22307EPSS
Exploits0References7
OSV
OSV
added 2019/07/11 7:15 p.m.0 views

ALPINE-CVE-2019-10193

A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past...

7.2CVSS7AI score0.33071EPSS
Exploits0References1
NVD
NVD
added 2019/07/11 7:15 p.m.12 views

CVE-2019-10192

A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write ...

7.2CVSS7AI score0.22307EPSS
Exploits0References17
OSV
OSV
added 2019/07/11 7:15 p.m.25 views

CVE-2019-10193

A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past...

7.2CVSS6.9AI score0.33071EPSS
Exploits0References12
OSV
OSV
added 2019/07/11 7:15 p.m.1 views

DEBIAN-CVE-2019-10193

A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past...

7.2CVSS7AI score0.33071EPSS
Exploits0References1
OSV
OSV
added 2019/07/11 7:15 p.m.1 views

DEBIAN-CVE-2019-10192

A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write ...

7.2CVSS7AI score0.22307EPSS
Exploits0References1
OSV
OSV
added 2019/07/11 7:15 p.m.1 views

ALPINE-CVE-2019-10192

A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write ...

7.2CVSS7AI score0.22307EPSS
Exploits0References1
Prion
Prion
added 2019/07/11 7:15 p.m.26 views

Stack overflow

A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past...

6.5CVSS6.7AI score0.33071EPSS
Exploits0References12Affected Software9
Rows per page
Query Builder