VDB
ALPINE-CVE-2018-11218
ALPINE-CVE-2018-11218
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows.
Risk Scores
CVSS 3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.6 | redis | 0, 2.4.14-r1, 2.4.16-r0 |
| Alpine:v3.7 | redis | 4.0, 3.0.5-r1, 2.8.9-r1 |
| Alpine:v3.5 | redis | 2.4.14-r2, 2.6.16-r0, 2.6.17-r0 |
Timeline
- Jun 17, 2018 CVE Published
- Jul 8, 2026 CVE Updated
- Aug 8, 2026 Distribution Patch