Wind River Support Network


LIN8-3361 : Security Advisory - redis - CVE-2015-8080

Created: Apr 25, 2016    Updated: Dec 3, 2018
Resolved Date: May 15, 2016
Found In Version: 8.0
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace


Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.

Other Downloads


Live chat