Signature Detail

APP: Lua Subsystem Redis CVE-2018-11219 Integer Overflow

This signature detects attempts to exploit a known vulnerability against Lua Subsystem Redis. A successful attack can result in a denial-of-service condition.

Extended Description

An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking.

Affected Products

• Debian debian_linux 9.0
• Oracle communications_operations_monitor 3.4
• Oracle communications_operations_monitor 4.0
• Redhat openstack 10
• Redhat openstack 13.0
• Redislabs redis 1.3.10
• Redislabs redis 1.3.11
• Redislabs redis 1.3.12
• Redislabs redis 1.3.6
• Redislabs redis 1.3.7
• Redislabs redis 1.3.8
• Redislabs redis 1.3.9
• Redislabs redis 2.0.0
• Redislabs redis 2.0.1
• Redislabs redis 2.0.2
• Redislabs redis 2.0.3
• Redislabs redis 2.0.4
• Redislabs redis 2.0.5
• Redislabs redis 2.1.1
• Redislabs redis 2.2
• Redislabs redis 2.2.0
• Redislabs redis 2.2.10
• Redislabs redis 2.2.105
• Redislabs redis 2.2.106
• Redislabs redis 2.2.107
• Redislabs redis 2.2.11
• Redislabs redis 2.2.110
• Redislabs redis 2.2.111
• Redislabs redis 2.2.12
• Redislabs redis 2.2.13
• Redislabs redis 2.2.14
• Redislabs redis 2.2.15
• Redislabs redis 2.2.2
• Redislabs redis 2.2.3
• Redislabs redis 2.2.4
• Redislabs redis 2.2.5
• Redislabs redis 2.2.6
• Redislabs redis 2.2.7
• Redislabs redis 2.2.8
• Redislabs redis 2.2.9
• Redislabs redis 2.3
• Redislabs redis 2.4.0
• Redislabs redis 2.4.1
• Redislabs redis 2.4.10
• Redislabs redis 2.4.11
• Redislabs redis 2.4.12
• Redislabs redis 2.4.13
• Redislabs redis 2.4.14
• Redislabs redis 2.4.15
• Redislabs redis 2.4.16
• Redislabs redis 2.4.17
• Redislabs redis 2.4.18
• Redislabs redis 2.4.2
• Redislabs redis 2.4.3
• Redislabs redis 2.4.4
• Redislabs redis 2.4.5
• Redislabs redis 2.4.6
• Redislabs redis 2.4.7
• Redislabs redis 2.4.8
• Redislabs redis 2.4.9
• Redislabs redis 2.6.0
• Redislabs redis 2.6.1
• Redislabs redis 2.6.10
• Redislabs redis 2.6.10-1
• Redislabs redis 2.6.10-2
• Redislabs redis 2.6.10-3
• Redislabs redis 2.6.11
• Redislabs redis 2.6.12
• Redislabs redis 2.6.13
• Redislabs redis 2.6.14
• Redislabs redis 2.6.14-1
• Redislabs redis 2.6.14-2
• Redislabs redis 2.6.15
• Redislabs redis 2.6.16
• Redislabs redis 2.6.17
• Redislabs redis 2.6.2
• Redislabs redis 2.6.3
• Redislabs redis 2.6.4
• Redislabs redis 2.6.5
• Redislabs redis 2.6.6
• Redislabs redis 2.6.7
• Redislabs redis 2.6.7-1
• Redislabs redis 2.6.8
• Redislabs redis 2.6.8-1
• Redislabs redis 2.6.9
• Redislabs redis 2.6.9-1
• Redislabs redis 2.8.0
• Redislabs redis 2.8.1
• Redislabs redis 2.8.10
• Redislabs redis 2.8.11
• Redislabs redis 2.8.12
• Redislabs redis 2.8.13
• Redislabs redis 2.8.14
• Redislabs redis 2.8.15
• Redislabs redis 2.8.16
• Redislabs redis 2.8.17
• Redislabs redis 2.8.18
• Redislabs redis 2.8.19
• Redislabs redis 2.8.2
• Redislabs redis 2.8.20
• Redislabs redis 2.8.21
• Redislabs redis 2.8.22
• Redislabs redis 2.8.23
• Redislabs redis 2.8.24
• Redislabs redis 2.8.3
• Redislabs redis 2.8.4
• Redislabs redis 2.8.5
• Redislabs redis 2.8.6
• Redislabs redis 2.8.7
• Redislabs redis 2.8.8
• Redislabs redis 2.8.9
• Redislabs redis 3.0
• Redislabs redis 3.0.0
• Redislabs redis 3.0.1
• Redislabs redis 3.0.2
• Redislabs redis 3.0.3
• Redislabs redis 3.0.4
• Redislabs redis 3.0.5
• Redislabs redis 3.0.6
• Redislabs redis 3.0.7
• Redislabs redis 3.2
• Redislabs redis 3.2.0
• Redislabs redis 3.2.1
• Redislabs redis 3.2.10
• Redislabs redis 3.2.11
• Redislabs redis 3.2.2
• Redislabs redis 3.2.3
• Redislabs redis 3.2.4
• Redislabs redis 3.2.5
• Redislabs redis 3.2.6
• Redislabs redis 3.2.7
• Redislabs redis 3.2.8
• Redislabs redis 3.2.9
• Redislabs redis 4.0
• Redislabs redis 4.0.0
• Redislabs redis 4.0.1
• Redislabs redis 4.0.2
• Redislabs redis 4.0.3
• Redislabs redis 4.0.4
• Redislabs redis 4.0.5
• Redislabs redis 4.0.6
• Redislabs redis 4.0.7
• Redislabs redis 4.0.8
• Redislabs redis 4.0.9
• Redislabs redis 5.0

References

• CVE: CVE-2018-11219
• URL: https://gist.github.com/antirez/bca0ad7a9c60c72e9600c7f720e9d035
• URL: https://github.com/antirez/redis/issues/5017