Red Hat Security Advisory

RHSA-2019:1819

rh-redis5-redis security update

Released 2019-07-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-redis5-redis-5.0.5-1.el7
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-redis5-redis-5.0.5-1.el7
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-redis5-redis-5.0.5-1.el7
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-redis5-redis-5.0.5-1.el7
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-redis5-redis-5.0.5-1.el7

Fixes 2 records

TI-2019-07513 CVE-2019-10192 · GHSA-pgcv-crqq-f8x5

Heap-based buffer overflow in redis

MEDIUM 53

A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.25616 Published 2019-07-11 Fixed in 3.2.13, 4.0.14 +1 CWE-122

TI-2019-07514 CVE-2019-10193 · GHSA-7c9p-23p9-r8x2

Stack-based buffer overflow in redis

MEDIUM 52

A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.23304 Published 2019-07-11 Fixed in 3.2.13, 4.0.14 +1 CWE-121