CVE-2020-14147: debian debian_linux Integer Overflow or Wraparound
Vulnerability summary
CVE-2020-14147 is a high (CVSS 7.7) Integer Overflow or Wraparound vulnerability in debian debian_linux. EPSS estimates a 3.08% chance of exploitation in the next 30 days, higher than 87.5% of scored vulnerabilities.
Timeline
- 15-06-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated7.7HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated7.7HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.7HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
EPSS trend
Probability
3.08%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
0.00 pp
From 3.08% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-190Integer Overflow or WraparoundThe product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
Affected systems
Suse3 products
- redis&distro=SUSE Package Hub 12< 4.0.14-bp151.3.6.1
- redis&distro=SUSE Package Hub 15 SP1< 4.0.14-bp151.3.6.1
- linux_enterprise12.0
Debian2 products
- redis< 5:6.0.0-1 | < 5:5.0.3-4+deb10u2
- debian_linuxEOL10.0
Alpine1 product
- redis≥ 6.0.0, < 6.0.3-r0
Mageia1 product
- redis< 5.0.9-1.mga7
Opensuse1 product
- redis&distro=openSUSE Leap 15.1< 4.0.14-bp151.3.6.1
Oracle1 product
- communications_operations_monitor3.4 | 4.1 | 4.2 | 4.3
Redislabs1 product
- redis< 5.0.9 | ≥ 6.0.0, < 6.0.3
Ubuntu1 product
- redisAll versions (No fix recorded)
8 vendors · 11 products
References
16 links- github.com/antirez/redis/commit/ef764dde1cca2f25d00686673d1bc89448819571X Refsource MISCREPORTPatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-07/msg00058.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 16 references
- lists.opensuse.org/archives/…Advisory