Summary
It was discovered that Redis incorrectly handled the hyperloglog data structure.
An attacker could use this issue to cause Redis to crash, resulting in a denial
of service, or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | redis | 2:3.0.6-1ubuntu0.4 |
| Ubuntu · 18.04 LTS 18.04:LTS | redis | 5:4.0.9-1ubuntu0.2 |
Vulnerabilities 1
-
High 7.2CVE-2019-10192 EPSS 26%
A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x …