Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2016-04-13T15:00:00
Updated: 2017-06-30T16:57:01
Reserved: 2015-11-06T00:00:00
Link: CVE-2015-8080
JSON object: View
NVD Information
Status : Analyzed
Published: 2016-04-13T15:59:04.257
Modified: 2022-08-05T14:31:54.707
Link: CVE-2015-8080
JSON object: View
Redhat Information
No data.
CWE