High severity · published Jul 11, 2019
CVE-2019-10193
A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4
7.2
CVSS
23.7%
EPSS
No
On KEV
Description
A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past the end of a stack-allocated buffer.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)23.7% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
Redis · Redis
3.0.0 before 3.2.13; 4.0.0 before 4.0.14; 5.0 before 5.0.4 · source: NVD
CO
Communications Operations Monitor · Oracle
3.4; 4.1 · source: NVD
DL
Debian Linux · Debian
9.0; 10.0 · source: NVD
EL
Enterprise Linux · Redhat
8.0 · source: NVD
EL
Enterprise Linux Eus · Redhat
8.1; 8.2; 8.4 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
8.2; 8.4 · source: NVD
EL
Enterprise Linux Server Tus · Redhat
8.2; 8.4 · source: NVD
OP
Openstack · Redhat
9; 10; 13; 14 · source: NVD
UL
Ubuntu Linux · Canonical
16.04; 18.04; 19.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-10193
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-10193
Third Party Advisory
http://www.securityfocus.com/bid/109290
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1819
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2002
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10193
Release Notes
https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES
Release Notes
https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES
More from Redis
10.0
CVE-2022-0543
Debian-specific Redis Server Lua Sandbox Escape Vulnerability
9.9
CVE-2025-49844
Redis is an open source, in-memory database that persists on disk
9.8
CVE-2025-27151
Redis is an open source, in-memory database that persists on disk
9.8
CVE-2024-46981
Redis' Lua library commands may lead to remote code execution
9.8
CVE-2022-3734
Redis on Windows dbghelp.dll uncontrolled search path