CVE-2018-11218 PUBLISHED

Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows.

EPSS 80.30% · 99.1th percentile

Risk Scores

EPSS Score
80.30%
99.1th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSredis2:3.0.3-3, 2:3.0.5-1, 2:3.0.5-2
Ubuntu:14.04:LTSredis0, 2:2.6.13-1, 2:2.6.16-3
Ubuntu:18.04:LTSredis0, 4:4.0.1-7, 4:4.0.2-6

Timeline

References

Open in Interactive Console →