Lucene search

K
redhatcveRedhat.comRH:CVE-2019-10192
HistoryDec 14, 2019 - 4:52 a.m.

CVE-2019-10192

2019-12-1404:52:05
redhat.com
access.redhat.com
8

EPSS

0.152

Percentile

95.9%

A heap buffer overflow vulnerability was found in the Redis HyperLogLog data structure. By carefully corrupting a HyperLogLog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding into writing up to 3 bytes beyond the end of a heap-allocated buffer.