CVE-2019-10193: Buffer Overflow
A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past the end of a stack-allocated buffer.
Other sources
Stack buffer overflow due to failure to validate register values in hllDenseRegHisto(). By corrupting a hyperloglog structure in Redis using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past the end of a stack-allocated buffer.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-10193.
What is the severity of CVE-2019-10193?
The severity of CVE-2019-10193 is high.
Which versions of Redis are affected by CVE-2019-10193?
Versions 3.x before 3.2.13, 4.x before 4.0.14, and 5.x before 5.0.4 are affected by CVE-2019-10193.
How can an attacker exploit CVE-2019-10193?
An attacker can exploit CVE-2019-10193 by corrupting a hyperloglog using the SETRANGE command.
Where can I find more information about CVE-2019-10193?
You can find more information about CVE-2019-10193 on the following references: [Bugzilla Red Hat](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10193), [Redis 3.2 Release Notes](https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES), [Redis 4.0 Release Notes](https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES).