GCVE - cpe:2.3:a:redis_labs:redis:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redis_labs:redis:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Redis Labs (`712dddae-30fb-5e13-947c-d7a2f23735cf`)
Product	Redis (`18502920-0991-5a4d-90b0-ef1114f28c9b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-10193`	vulnerable	2026-06-08 05:12:22.479743	Details available HIGH (7.2) A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past the end of a stack-allocated buffer. Published: 2019-07-11T18:30:33.000Z Updated: 2024-08-04T22:17:18.421Z Open on db.gcve.eu Reference links https://www.debian.org/security/2019/dsa-4480 https://seclists.org/bugtraq/2019/Jul/19 https://usn.ubuntu.com/4061-1/ http://www.securityfocus.com/bid/109290 https://access.redhat.com/errata/RHSA-2019:1819	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10192`	vulnerable	2026-06-08 05:12:22.474278	Details available HIGH (7.2) A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer. Published: 2019-07-11T18:30:33.000Z Updated: 2024-08-04T22:17:18.947Z Open on db.gcve.eu Reference links https://www.debian.org/security/2019/dsa-4480 https://seclists.org/bugtraq/2019/Jul/19 https://usn.ubuntu.com/4061-1/ http://www.securityfocus.com/bid/109290 https://access.redhat.com/errata/RHSA-2019:1819	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0180`	vulnerable	2026-06-08 05:03:45.679201	Details available Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds. Published: 2019-11-01T18:25:30.000Z Updated: 2024-08-06T14:18:09.403Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/01/14/7 https://bugzilla.redhat.com/show_bug.cgi?id=894659	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0178`	vulnerable	2026-06-08 05:03:45.669471	Details available Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm. Published: 2019-11-01T18:25:27.000Z Updated: 2024-08-06T14:18:09.441Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2013-0178 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0178 http://www.openwall.com/lists/oss-security/2013/01/14/5 http://www.openwall.com/lists/oss-security/2013/01/14/7 https://exchange.xforce.ibmcloud.com/vulnerabilities/81329	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Redis

Notes

PURL mappings

Vulnerability references

Contribute