SUSE CVE-2020-14147

An integer overflow in the getnum function in luastruct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox restrictions via a large...

Denial Of Service (DoS)

redis is vulnerable to denial of service. An integer overflow in the getnum function in luastruct.c allows an attacker to crash the application...

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

...

Updated redis packages fix security vulnerability

An integer overflow in the getnum function in luastruct.c CVE-2020-14147...

Denial Of Service (DoS)

redis is vulnerable to denial of service. An integer overflow in the luastruct.c:bunpack function allows a remote attacker to exploit the vulnerability and cause a denial of service condition or have other unspecified impact...

Redis 'getnum' function integer overflow vulnerability

Redis is a set of open source written in ANSI C , network support , memory-based can also be persistent log-type , key-value store database , and provides a variety of languages API. An integer overflow vulnerability exists in the 'getnum' function in the luastruct.c file of Redis, which can be...

redis: Integer wraparound in lua_struct.c causing stack-based buffer overflow

An integer-wraparound flaw leading to a stack-based overflow was found in Redis. A user with access to run Lua code in a Redis session could possibly use this flaw to crash the server denial of service or gain code execution outside of the Lua sandbox...

redis: Integer wraparound in lua_struct.c causing stack-based buffer overflow

An integer-wraparound flaw leading to a stack-based overflow was found in Redis. A user with access to run Lua code in a Redis session could possibly use this flaw to crash the server denial of service or gain code execution outside of the Lua sandbox...