CVE-2018-11219

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published: Jun 17, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-11227.0procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-cont CVE-2018-112208.8Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function.CVE-2018-112219.8Unauthenticated untrusted file upload in Artica Pandora FMS through version 7.23 allows an attacker to upload an arbitrary plugin via includ CVE-2018-112227.5Local File Inclusion (LFI) in Artica Pandora FMS through version 7.23 allows an attacker to call any php file via the /pandora_console/ajax.CVE-2018-112235.4XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a crafted "refr" parameter in a "/pandora_conso CVE-2018-112246.5An issue was discovered in Libav 12.3. A read access violation in the in_table_init16 function in libavcodec/aacsbr.c allows remote attacker CVE-2018-112258.8The dcputs function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual CVE-2018-112268.8The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actu CVE-2018-112276.1Monstra CMS 3.0.4 and earlier has XSS via index.php.CVE-2018-112289.8Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code CVE-2018-112299.8Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code CVE-2018-11237.5procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard p