CVE-2020-14147

HIGH

Redis < 6.0.3 - Denial of Service via Integer Overflow in getnum Function

Title source: llm
STIX 2.1

Description

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

References (6)

Core 6
Core References
Patch, Third Party Advisory x_refsource_misc
https://github.com/antirez/redis/pull/6875
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2020/dsa-4731
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00058.html
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/202008-17
Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpujan2021.html

Scores

CVSS v3 7.7
EPSS 0.0027
EPSS Percentile 50.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Details

CWE
CWE-190 CWE-787
Status published
Products (7)
debian/debian_linux 10.0
oracle/communications_operations_monitor 3.4
oracle/communications_operations_monitor 4.1
oracle/communications_operations_monitor 4.2
oracle/communications_operations_monitor 4.3
redislabs/redis < 5.0.9
suse/linux_enterprise 12.0
Published Jun 15, 2020
Tracked Since Feb 18, 2026