GCVE - cpe:2.3:a:redislabs:redis:5.0:rc1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redislabs:redis:5.0:rc1:*:*:*:*:*:*

part: a version: 5.0 update: rc1

Vendor	Redislabs (`141bc4aa-6611-58f9-8087-2739212ec32f`)
Product	Redis (`c9caf9ba-f094-5668-969a-ddd54963b6e3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:docker/redis`	purl2cpe	2026-06-01 10:13:18.823318
`pkg:github/redis/redis`	purl2cpe	2026-06-01 10:13:18.823319
`pkg:redis/redis`	purl2cpe	2026-06-01 10:13:18.823320

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-12326`	vulnerable	2026-06-08 05:10:41.371801	Details available Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution and escalate to higher privileges via a crafted command line. NOTE: It is unclear whether there are any common situations in which redis-cli is used with, for example, a -h (aka hostname) argument from an untrusted source. Published: 2018-06-17T14:00:00.000Z Updated: 2024-08-05T08:30:59.784Z Open on db.gcve.eu Reference links https://gist.github.com/fakhrizulkifli/f831f40ec6cde4f744c552503d8698f0 https://www.exploit-db.com/exploits/44904/ https://access.redhat.com/errata/RHSA-2019:0052 https://access.redhat.com/errata/RHSA-2019:0094 https://github.com/antirez/redis/commit/9fdcc15962f9ff4baebe6fdd947816f43f730d50	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-11219`	vulnerable	2026-06-08 05:10:37.990404	Details available An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking. Published: 2018-06-17T17:00:00.000Z Updated: 2024-08-05T08:01:52.547Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/104552 https://github.com/antirez/redis/issues/5017 https://github.com/antirez/redis/commit/1eb08bcd4634ae42ec45e8284923ac048beaa4c3 https://www.debian.org/security/2018/dsa-4230 https://access.redhat.com/errata/RHSA-2019:0052	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-11218`	vulnerable	2026-06-08 05:10:37.987961	Details available Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows. Published: 2018-06-17T17:00:00.000Z Updated: 2024-08-05T08:01:52.448Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/104553 https://github.com/antirez/redis/issues/5017 https://www.debian.org/security/2018/dsa-4230 https://access.redhat.com/errata/RHSA-2019:0052 https://github.com/antirez/redis/commit/5ccb6f7a791bf3490357b00a898885759d98bab0	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.