CVE-2018-12326

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution and escalate to higher privileges via a crafted command line. NOTE: It is unclear whether there are any common situations in which redis-cli is used with, for example, a -h (aka hostname) argument from an untrusted source.

Metrics

CVSS 3.0 8.4/10CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://access.redhat.com/errata/RHSA-2019:0052
https://access.redhat.com/errata/RHSA-2019:0094
https://access.redhat.com/errata/RHSA-2019:1860
https://gist.github.com/fakhrizulkifli/f831f40ec6cde4f744c552503d8698f0Third Party Advisory
https://github.com/antirez/redis/commit/9fdcc15962f9ff4baebe6fdd947816f43f730d50Patch, Third Party Advisory
https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTESPatch, Third Party Advisory
https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTESPatch, Third Party Advisory
https://www.exploit-db.com/exploits/44904/Exploit, Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2019:0052
https://access.redhat.com/errata/RHSA-2019:0094
https://access.redhat.com/errata/RHSA-2019:1860
https://gist.github.com/fakhrizulkifli/f831f40ec6cde4f744c552503d8698f0Third Party Advisory
https://github.com/antirez/redis/commit/9fdcc15962f9ff4baebe6fdd947816f43f730d50Patch, Third Party Advisory
https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTESPatch, Third Party Advisory
https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTESPatch, Third Party Advisory
https://www.exploit-db.com/exploits/44904/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Jun 17, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-123279.8Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher pri CVE-2018-123295.9Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows a local attacker to duplicate an authentication factor via clo CVE-2018-12336.1RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are affected by a cross-site scripting vulnera CVE-2018-123308.1Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys v CVE-2018-123317.4Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance (aka SMA) 5.2.68 allows a man-in-the-middle attacker to CVE-2018-123324.2Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption ke CVE-2018-123338.1Insufficient Verification of Data Authenticity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to manipulate secu CVE-2018-123347.5Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys v CVE-2018-123357.3Incorrect access control in ECOS System Management Appliance (aka SMA) 5.2.68 allows a user to compromise authentication keys, and access an CVE-2018-123369.8Undocumented Factory Backdoor in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows the vendor to extract confidential information via remote roo CVE-2018-123374.6Reliance on Security Through Obscurity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to partially extract confi CVE-2018-123389.8Undocumented Factory Backdoor in ECOS System Management Appliance (aka SMA) 5.2.68 allows the vendor to extract confidential information and