Red Hat Security Advisory

RHSA-2019:2628

redis security update

Released 2019-09-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 13.0 redis-3.2.8-4.el7ost

Fixes 1 record

TI-2019-07513 CVE-2019-10192 · GHSA-pgcv-crqq-f8x5

Heap-based buffer overflow in redis

MEDIUM 53

A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.25616 Published 2019-07-11 Fixed in 3.2.13, 4.0.14 +1 CWE-122