CVE-2018-12326
Fixed in a distro release EPSS 3%
Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution and escalate to higher privileges via a crafted command line. NOTE: It is unclear whether there are any common situations in which redis-cli is used with, for example, a -h (aka hostname) argument from an untrusted source.
Products: redislabs redis
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | redis | 5:4.0.10-1 |
| Debian 13 | redis | 5:4.0.10-1 |
| Debian 14 | redis | 5:4.0.10-1 |
| Debian 8 | redis | 2:2.8.17-1+deb8u6 |
| Debian 9 | redis | 3:3.2.6-3+deb9u1 |
| Red Hat openstack 10 | redis | 0:3.0.6-4.el7ost |
| Red Hat openstack 10 | redis-debuginfo | 0:3.0.6-4.el7ost |
| Red Hat openstack 13 | redis | 0:3.2.8-3.el7ost |
| Red Hat openstack 13 | redis-debuginfo | 0:3.2.8-3.el7ost |
| Red Hat rhel software collections 3 | rh-redis32-redis | 0:3.2.13-1.el6 |
| Red Hat rhel software collections 3 | rh-redis32-redis | 0:3.2.13-1.el7 |
| Red Hat rhel software collections 3 | rh-redis32-redis-debuginfo | 0:3.2.13-1.el6 |
| Red Hat rhel software collections 3 | rh-redis32-redis-debuginfo | 0:3.2.13-1.el7 |
| Ubuntu 14.04 LTS | redis | 2:2.8.4-2ubuntu0.2 |
| Ubuntu 16.04 LTS | redis | 2:3.0.6-1ubuntu0.2 |
| Ubuntu 18.04 LTS | redis | 5:4.0.9-1ubuntu0.1 |