CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10192

A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.326

EPSS Ranking 96.6%

CVSS Severity

CVSS v3 Score 7.2

CVSS v2 Score 6.5

References

Products affected by CVE-2019-10192

Oracle » Communications Operations Monitor » Version: 3.4

cpe:2.3:a:oracle:communications_operations_monitor:3.4
Oracle » Communications Operations Monitor » Version: 4.1

cpe:2.3:a:oracle:communications_operations_monitor:4.1
Redhat » Openstack » Version: 10

cpe:2.3:a:redhat:openstack:10
Redhat » Openstack » Version: 13

cpe:2.3:a:redhat:openstack:13
Redhat » Openstack » Version: 14

cpe:2.3:a:redhat:openstack:14
Redhat » Openstack » Version: 9

cpe:2.3:a:redhat:openstack:9
Redhat » Software Collections » Version: 1.0

cpe:2.3:a:redhat:software_collections:1.0
Redislabs » Redis » Version: 3.0.0

cpe:2.3:a:redislabs:redis:3.0.0
Redislabs » Redis » Version: 3.0.1

cpe:2.3:a:redislabs:redis:3.0.1
Redislabs » Redis » Version: 3.0.2

cpe:2.3:a:redislabs:redis:3.0.2
Redislabs » Redis » Version: 3.0.3

cpe:2.3:a:redislabs:redis:3.0.3
Redislabs » Redis » Version: 3.0.4

cpe:2.3:a:redislabs:redis:3.0.4
Redislabs » Redis » Version: 3.0.5

cpe:2.3:a:redislabs:redis:3.0.5
Redislabs » Redis » Version: 3.0.6

cpe:2.3:a:redislabs:redis:3.0.6
Redislabs » Redis » Version: 3.0.7

cpe:2.3:a:redislabs:redis:3.0.7
Redislabs » Redis » Version: 3.2

cpe:2.3:a:redislabs:redis:3.2
Redislabs » Redis » Version: 3.2.0

cpe:2.3:a:redislabs:redis:3.2.0
Redislabs » Redis » Version: 3.2.1

cpe:2.3:a:redislabs:redis:3.2.1
Redislabs » Redis » Version: 3.2.10

cpe:2.3:a:redislabs:redis:3.2.10
Redislabs » Redis » Version: 3.2.11

cpe:2.3:a:redislabs:redis:3.2.11
Redislabs » Redis » Version: 3.2.12

cpe:2.3:a:redislabs:redis:3.2.12
Redislabs » Redis » Version: 3.2.2

cpe:2.3:a:redislabs:redis:3.2.2
Redislabs » Redis » Version: 3.2.3

cpe:2.3:a:redislabs:redis:3.2.3
Redislabs » Redis » Version: 3.2.4

cpe:2.3:a:redislabs:redis:3.2.4
Redislabs » Redis » Version: 3.2.5

cpe:2.3:a:redislabs:redis:3.2.5
Redislabs » Redis » Version: 3.2.6

cpe:2.3:a:redislabs:redis:3.2.6
Redislabs » Redis » Version: 3.2.7

cpe:2.3:a:redislabs:redis:3.2.7
Redislabs » Redis » Version: 3.2.8

cpe:2.3:a:redislabs:redis:3.2.8
Redislabs » Redis » Version: 3.2.9

cpe:2.3:a:redislabs:redis:3.2.9
Redislabs » Redis » Version: 4.0.0

cpe:2.3:a:redislabs:redis:4.0.0
Redislabs » Redis » Version: 4.0.1

cpe:2.3:a:redislabs:redis:4.0.1
Redislabs » Redis » Version: 4.0.10

cpe:2.3:a:redislabs:redis:4.0.10
Redislabs » Redis » Version: 4.0.11

cpe:2.3:a:redislabs:redis:4.0.11
Redislabs » Redis » Version: 4.0.12

cpe:2.3:a:redislabs:redis:4.0.12
Redislabs » Redis » Version: 4.0.13

cpe:2.3:a:redislabs:redis:4.0.13
Redislabs » Redis » Version: 4.0.2

cpe:2.3:a:redislabs:redis:4.0.2
Redislabs » Redis » Version: 4.0.3

cpe:2.3:a:redislabs:redis:4.0.3
Redislabs » Redis » Version: 4.0.4

cpe:2.3:a:redislabs:redis:4.0.4
Redislabs » Redis » Version: 4.0.5

cpe:2.3:a:redislabs:redis:4.0.5
Redislabs » Redis » Version: 4.0.6

cpe:2.3:a:redislabs:redis:4.0.6
Redislabs » Redis » Version: 4.0.7

cpe:2.3:a:redislabs:redis:4.0.7
Redislabs » Redis » Version: 4.0.8

cpe:2.3:a:redislabs:redis:4.0.8
Redislabs » Redis » Version: 4.0.9

cpe:2.3:a:redislabs:redis:4.0.9
Redislabs » Redis » Version: 5.0

cpe:2.3:a:redislabs:redis:5.0
Redislabs » Redis » Version: 5.0.0

cpe:2.3:a:redislabs:redis:5.0.0
Redislabs » Redis » Version: 5.0.1

cpe:2.3:a:redislabs:redis:5.0.1
Redislabs » Redis » Version: 5.0.2

cpe:2.3:a:redislabs:redis:5.0.2
Redislabs » Redis » Version: 5.0.3

cpe:2.3:a:redislabs:redis:5.0.3
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 19.04

cpe:2.3:o:canonical:ubuntu_linux:19.04
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux Eus » Version: 8.1

cpe:2.3:o:redhat:enterprise_linux_eus:8.1
Redhat » Enterprise Linux Eus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_eus:8.2
Redhat » Enterprise Linux Eus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_eus:8.4
Redhat » Enterprise Linux Server Aus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2
Redhat » Enterprise Linux Server Aus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4
Redhat » Enterprise Linux Server Tus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2
Redhat » Enterprise Linux Server Tus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10192

Products

Pricing

Contact Us