Most recent entries from all

bdu:2019-03567

Withdrawn: BELL-CVE-2019-10192 — CVE-2019-10192 does not affect BellSoft software

Withdrawn by the publisher.

Withdrawn: CLEANSTART-2026-AF35851 — Redis is an open source, in-memory database that persists on disk

Withdrawn by the publisher.

Affected: CleanStart: redis

Multiple security vulnerabilities affect the redis package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details.

EUVD-2026-53451

fkie_cve-2019-10192

A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.

GHSA-pgcv-crqq-f8x5

gsd-2019-10192

RHSA-2019:1819 — Red Hat Security Advisory: rh-redis5-redis security update

redis: Heap buffer overflow in HyperLogLog triggered by malicious client redis: Stack buffer overflow in HyperLogLog triggered by malicious client

RHSA-2019:2002 — Red Hat Security Advisory: redis:5 security update

redis: Heap buffer overflow in HyperLogLog triggered by malicious client redis: Stack buffer overflow in HyperLogLog triggered by malicious client

UBUNTU-CVE-2019-10192

Affected: Ubuntu:16.04:LTS: redis, Ubuntu:18.04:LTS: redis

WID-SEC-W-2022-0517 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.