Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2016-04-13T15:00:00
Updated: 2024-08-06T08:06:31.849Z
Reserved: 2015-11-06T00:00:00
Link: CVE-2015-8080
Vulnrichment
No data.
NVD
Status : Modified
Published: 2016-04-13T15:59:04.257
Modified: 2024-11-21T02:37:58.717
Link: CVE-2015-8080
Redhat