Summary
[5.0.3-2]
- fix Heap buffer overflow in HyperLogLog triggered by malicious client
CVE-2019-10192
- fix Stack buffer overflow in HyperLogLog triggered by malicious client
CVE-2019-10193
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | redis | 0:5.0.3-2.module+el8.0.0.z+5250+19ca22c8 |
| Oracle Linux · 8 | redis-devel | 0:5.0.3-2.module+el8.0.0.z+5250+19ca22c8 |
| Oracle Linux · 8 | redis-doc | 0:5.0.3-2.module+el8.0.0.z+5250+19ca22c8 |
Vulnerabilities 2
-
High 7.2CVE-2019-10192 EPSS 26%
A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x …
-
High 7.2CVE-2019-10193 EPSS 23%
A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x…