2015-12-21
ALT-BU-2015-2814-1
Branch sisyphus update bulletin.
Closed bugs
without lcms2
Closed vulnerabilities
Published: 2016-04-13
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2015-8080
Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.
Severity: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- openSUSE-SU-2016:1444
- openSUSE-SU-2016:1444
- RHSA-2016:0095
- RHSA-2016:0095
- RHSA-2016:0096
- RHSA-2016:0096
- RHSA-2016:0097
- RHSA-2016:0097
- DSA-3412
- DSA-3412
- [oss-security] 20151106 Review+CVE request: multiple issues in redis EVAL command (lua sandbox)
- [oss-security] 20151106 Review+CVE request: multiple issues in redis EVAL command (lua sandbox)
- [oss-security] 20151106 Re: Review+CVE request: multiple issues in redis EVAL command (lua sandbox)
- [oss-security] 20151106 Re: Review+CVE request: multiple issues in redis EVAL command (lua sandbox)
- 77507
- 77507
- https://github.com/antirez/redis/issues/2855
- https://github.com/antirez/redis/issues/2855
- https://raw.githubusercontent.com/antirez/redis/2.8/00-RELEASENOTES
- https://raw.githubusercontent.com/antirez/redis/2.8/00-RELEASENOTES
- https://raw.githubusercontent.com/antirez/redis/3.0/00-RELEASENOTES
- https://raw.githubusercontent.com/antirez/redis/3.0/00-RELEASENOTES
- GLSA-201702-16
- GLSA-201702-16