Vulnerability · Published Jun 15, 2020 · Assigned by mitre

CVE-2020-14147

High 7.7

In plain English

A high-severity security flaw in the redis package (Alpine). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.1% (higher than 88% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.7High

Exploit odds (30 days)3.1%top 12.2% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Alpine:v3.20	redis	6.0.3-r0	ALPINE-CVE-2020-14147
Alpine:v3.21	redis	6.0.3-r0	ALPINE-CVE-2020-14147
Alpine:v3.22	redis	6.0.3-r0	ALPINE-CVE-2020-14147
Alpine:v3.23	redis	6.0.3-r0	ALPINE-CVE-2020-14147
Alpine:v3.24	redis	6.0.3-r0	ALPINE-CVE-2020-14147
Debian:12	redis	5:6.0.0-1	DEBIAN-CVE-2020-14147
Debian:13	redis	5:6.0.0-1	DEBIAN-CVE-2020-14147
Debian:14	redis	5:6.0.0-1	DEBIAN-CVE-2020-14147

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/antirez/redis/pull/6875 x_refsource_MISC
https://github.com/antirez/redis/commit/ef764dde1cca2f25d00686673d1bc89448819571 x_refsource_MISC
DSA-4731 vendor-advisory, x_refsource_DEBIAN
openSUSE-SU-2020:1035 vendor-advisory, x_refsource_SUSE
GLSA-202008-17 vendor-advisory, x_refsource_GENTOO
https://www.oracle.com/security-alerts/cpujan2021.html x_refsource_MISC