ALPINE-CVE-2018-11218

ALPINE-CVE-2018-11218 PUBLISHED CVSS 9.800000190734863 CRITICAL

Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows.

Risk Scores

CVSS 3.0

9.800000190734863

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Alpine:v3.6	redis	0, 2.4.14-r1, 2.4.16-r0
Alpine:v3.7	redis	4.0.6-r0, 3.0.5-r1, 2.8.9-r1
Alpine:v3.5	redis	2.4.14-r2, 2.6.16-r0, 2.6.17-r0

Exploit Intelligence

cve_db.json (github-poc)

Timeline

Jun 17, 2018 CVE Published
Nov 19, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2018-11218 advisory

Open in Interactive Console →