Red Hat Security Advisory

RHSA-2019:2002

redis:5 security update

Released 2019-08-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) redis-5.0.3-2.module+el8.0.0.z+3657+acb471dc.aarch64::redis:5, redis-5.0.3-2.module+el8.0.0.z+3657+acb471dc.ppc64le::redis:5, redis-5.0.3-2.module+el8.0.0.z+3657+acb471dc.s390x::redis:5 +7

Fixes 2 records

TI-2019-07513 CVE-2019-10192 · GHSA-pgcv-crqq-f8x5

Heap-based buffer overflow in redis

MEDIUM 53

A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.25616 Published 2019-07-11 Fixed in 3.2.13, 4.0.14 +1 CWE-122

TI-2019-07514 CVE-2019-10193 · GHSA-7c9p-23p9-r8x2

Stack-based buffer overflow in redis

MEDIUM 52

A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.23304 Published 2019-07-11 Fixed in 3.2.13, 4.0.14 +1 CWE-121