ID de Prueba:	1.3.6.1.4.1.25623.1.0.813438
Categoría:	Databases
Título:	Redis Integer Overflow and Stack-Based Buffer Overflow Vulnerabilities
Resumen:	Redis is prone to integer overflow and stack-based buffer overflow vulnerabilities.
Descripción:	Summary: Redis is prone to integer overflow and stack-based buffer overflow vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - A vulnerability within the 'struct' Lua package shipped with Redis which contains integer overflow due to failure in bound-checking statement. - A vulnerability within the 'cmsgpack' Lua package shipped with Redis which contains stack-based buffer overflows. Vulnerability Impact: Successful exploitation will allow an attacker to conduct a denial-of-service condition, crashing the Redis server. Affected Software/OS: Redis versions before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 Solution: Update to version 3.2.12 or 4.0.10 or 5.0 RC2 or later. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-11219 Common Vulnerability Exposure (CVE) ID: CVE-2018-11218
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.