APP: Lua Subsystem Redis CVE-2018-11219 Integer Overflow

This signature detects attempts to exploit a known vulnerability against Lua Subsystem Redis. A successful attack can result in a denial-of-service condition.

Extended Description

An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking.

Affected Products

Redhat openstack

References

CVE: CVE-2018-11219

URL: https://gist.github.com/antirez/bca0ad7a9c60c72e9600c7f720e9d035 https://github.com/antirez/redis/issues/5017

Short Name

APP:REDIS-STRUCT-IO

Severity

Major

Recommended

True

Recommended Action

Drop

APP: Lua Subsystem Redis CVE-2018-11219 Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?