CVE-2020-14147
Fixed in a distro release EPSS 3%
An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.
Products: redislabs redis, oracle communications_operations_monitor, suse linux_enterprise, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.13 | redis | 6.0.3-r0 |
| Alpine 3.14 | redis | 6.0.3-r0 |
| Alpine 3.15 | redis | 6.0.3-r0 |
| Alpine 3.16 | redis | 6.0.3-r0 |
| Alpine 3.17 | redis | 6.0.3-r0 |
| Alpine 3.18 | redis | 6.0.3-r0 |
| Alpine 3.19 | redis | 6.0.3-r0 |
| Debian 10 | redis | 5:5.0.3-4+deb10u2 |
| Debian 12 | redis | 5:6.0.0-1 |
| Debian 13 | redis | 5:6.0.0-1 |
| Debian 14 | redis | 5:6.0.0-1 |
| SUSE Package Hub 12 | redis | 4.0.14-bp151.3.6.1 |
| SUSE Package Hub 15 SP1 | redis | 4.0.14-bp151.3.6.1 |
| Ubuntu Pro 20.04 LTS | redis | no fix |
| openSUSE Leap 15.1 | redis | 4.0.14-bp151.3.6.1 |