CVE-2019-10193: canonical ubuntu_linux Stack-based Buffer Overflow
Vulnerability summary
CVE-2019-10193 is a high (CVSS 7.2) Stack-based Buffer Overflow vulnerability in canonical ubuntu_linux. EPSS estimates a 23.70% chance of exploitation in the next 30 days, higher than 97.7% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 4Timeline
- 11-07-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past the end of a stack-allocated buffer.
CVSS metrics
6 scores · 4 sources · 3 versions- OSV · AlpineEcosystem advisory · calculated7.2HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.2HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.2HighCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
23.70%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 23.70% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
Affected systems
Redhat5 products
- enterprise_linux8.0
- enterprise_linux_eus8.1 | 8.2 | 8.4
- enterprise_linux_server_aus8.2 | 8.4
- enterprise_linux_server_tus8.2 | 8.4
- openstack9 | 10 | 13 | 14
Debian2 products
- redis< 5:5.0.4-1
- debian_linuxEOL9.0 | 10.0
Alpine1 product
- redis≥ 3.0.0, < 5.0.4-r0 | ≥ 3.0.0, < 4.0.14-r0
Canonical1 product
- ubuntu_linuxEOL16.04 | 18.04 | 19.04
Oracle1 product
- communications_operations_monitor3.4 | 4.1
Redis labs1 product
- redis3.x before 3.2.13 | 4.x before 4.0.14 | 5.x before 5.0.4
Redislabs1 product
- redis≥ 3.0.0, < 3.2.13 | ≥ 4.0.0, < 4.0.14 | ≥ 5.0, < 5.0.4
7 vendors · 12 products
References
14 links
- raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTESX Refsource MISCRelease NotesVendor Advisory
- raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTESX Refsource MISCRelease NotesVendor Advisory
Show all 14 references
- raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTESX Refsource MISCRelease NotesVendor Advisory
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10193X Refsource CONFIRMIssue TrackingThird Party Advisory