ID CVE-2018-12453
Summary Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0 allows remote attackers to cause denial-of-service via an XGROUP command in which the key is not a stream.
References
Vulnerable Configurations
  • Redis Labs Redis 1.3.6
    cpe:2.3:a:redislabs:redis:1.3.6
  • Redis Labs Redis 1.3.7
    cpe:2.3:a:redislabs:redis:1.3.7
  • Redis Labs Redis 1.3.8
    cpe:2.3:a:redislabs:redis:1.3.8
  • Redis Labs Redis 1.3.9
    cpe:2.3:a:redislabs:redis:1.3.9
  • Redis Labs Redis 1.3.10
    cpe:2.3:a:redislabs:redis:1.3.10
  • Redis Labs Redis 1.3.11
    cpe:2.3:a:redislabs:redis:1.3.11
  • Redis Labs Redis 1.3.12
    cpe:2.3:a:redislabs:redis:1.3.12
  • Redis Labs Redis 2.0.0
    cpe:2.3:a:redislabs:redis:2.0.0
  • Redis Labs Redis 2.0.0 Release Candidate 1
    cpe:2.3:a:redislabs:redis:2.0.0:rc1
  • Redis Labs Redis 2.0.0 Release Candidate 1b
    cpe:2.3:a:redislabs:redis:2.0.0:rc1b
  • Redis Labs Redis 2.0.0 Release Candidate 2
    cpe:2.3:a:redislabs:redis:2.0.0:rc2
  • Redis Labs Redis 2.0.0 Release Candidate 3
    cpe:2.3:a:redislabs:redis:2.0.0:rc3
  • Redis Labs Redis 2.0.0 Release Candidate 4
    cpe:2.3:a:redislabs:redis:2.0.0:rc4
  • Redis Labs Redis 2.0.1
    cpe:2.3:a:redislabs:redis:2.0.1
  • Redis Labs Redis 2.0.2
    cpe:2.3:a:redislabs:redis:2.0.2
  • Redis Labs Redis 2.0.3
    cpe:2.3:a:redislabs:redis:2.0.3
  • Redis Labs Redis 2.0.4
    cpe:2.3:a:redislabs:redis:2.0.4
  • Redis Labs Redis 2.0.5
    cpe:2.3:a:redislabs:redis:2.0.5
  • Redis Labs Redis 2.1.1
    cpe:2.3:a:redislabs:redis:2.1.1
  • Redis Labs Redis 2.2 Alpha 0
    cpe:2.3:a:redislabs:redis:2.2:alpha0
  • Redis Labs Redis 2.2 Alpha 1
    cpe:2.3:a:redislabs:redis:2.2:alpha1
  • Redis Labs Redis 2.2 Alpha 2
    cpe:2.3:a:redislabs:redis:2.2:alpha2
  • Redis Labs Redis 2.2 Alpha 3
    cpe:2.3:a:redislabs:redis:2.2:alpha3
  • Redis Labs Redis 2.2 Alpha 4
    cpe:2.3:a:redislabs:redis:2.2:alpha4
  • Redis Labs Redis 2.2 Alpha 5
    cpe:2.3:a:redislabs:redis:2.2:alpha5
  • Redis Labs Redis 2.2 Alpha 6
    cpe:2.3:a:redislabs:redis:2.2:alpha6
  • Redis Labs Redis 2.2.0
    cpe:2.3:a:redislabs:redis:2.2.0
  • Redis Labs Redis 2.2.0 Release Candidate 1
    cpe:2.3:a:redislabs:redis:2.2.0:rc1
  • Redis Labs Redis 2.2.0 Release Candidate 2
    cpe:2.3:a:redislabs:redis:2.2.0:rc2
  • Redis Labs Redis 2.2.0 Release Candidate 3
    cpe:2.3:a:redislabs:redis:2.2.0:rc3
  • Redis Labs Redis 2.2.0 Release Candidate 4
    cpe:2.3:a:redislabs:redis:2.2.0:rc4
  • Redis Labs Redis 2.2.2
    cpe:2.3:a:redislabs:redis:2.2.2
  • Redis Labs Redis 2.2.3
    cpe:2.3:a:redislabs:redis:2.2.3
  • Redis Labs Redis 2.2.4
    cpe:2.3:a:redislabs:redis:2.2.4
  • Redis Labs Redis 2.2.5
    cpe:2.3:a:redislabs:redis:2.2.5
  • Redis Labs Redis 2.2.6
    cpe:2.3:a:redislabs:redis:2.2.6
  • Redis Labs Redis 2.2.7
    cpe:2.3:a:redislabs:redis:2.2.7
  • Redis Labs Redis 2.2.8
    cpe:2.3:a:redislabs:redis:2.2.8
  • Redis Labs Redis 2.2.9
    cpe:2.3:a:redislabs:redis:2.2.9
  • Redis Labs Redis 2.2.10
    cpe:2.3:a:redislabs:redis:2.2.10
  • Redis Labs Redis 2.2.11
    cpe:2.3:a:redislabs:redis:2.2.11
  • Redis Labs Redis 2.2.12
    cpe:2.3:a:redislabs:redis:2.2.12
  • Redis Labs Redis 2.2.13
    cpe:2.3:a:redislabs:redis:2.2.13
  • Redis Labs Redis 2.2.14
    cpe:2.3:a:redislabs:redis:2.2.14
  • Redis Labs Redis 2.2.15
    cpe:2.3:a:redislabs:redis:2.2.15
  • Redis Labs Redis 2.2.105
    cpe:2.3:a:redislabs:redis:2.2.105
  • Redis Labs Redis 2.2.106
    cpe:2.3:a:redislabs:redis:2.2.106
  • Redis Labs Redis 2.2.107
    cpe:2.3:a:redislabs:redis:2.2.107
  • Redis Labs Redis 2.2.110
    cpe:2.3:a:redislabs:redis:2.2.110
  • Redis Labs Redis 2.2.111
    cpe:2.3:a:redislabs:redis:2.2.111
  • Redis Labs Redis 2.3 Alpha 0
    cpe:2.3:a:redislabs:redis:2.3:alpha0
  • Redis Labs Redis 2.4.0
    cpe:2.3:a:redislabs:redis:2.4.0
  • Redis Labs Redis 2.4.0 Release Candidate 1
    cpe:2.3:a:redislabs:redis:2.4.0:rc1
  • Redis Labs Redis 2.4.0 Release Candidate 2
    cpe:2.3:a:redislabs:redis:2.4.0:rc2
  • Redis Labs Redis 2.4.0 Release Candidate 3
    cpe:2.3:a:redislabs:redis:2.4.0:rc3
  • Redis Labs Redis 2.4.0 Release Candidate 4
    cpe:2.3:a:redislabs:redis:2.4.0:rc4
  • Redis Labs Redis 2.4.0 Release Candidate 5
    cpe:2.3:a:redislabs:redis:2.4.0:rc5
  • Redis Labs Redis 2.4.0 Release Candidate 6
    cpe:2.3:a:redislabs:redis:2.4.0:rc6
  • Redis Labs Redis 2.4.0 Release Candidate 7
    cpe:2.3:a:redislabs:redis:2.4.0:rc7
  • Redis Labs Redis 2.4.0 Release Candidate 8
    cpe:2.3:a:redislabs:redis:2.4.0:rc8
  • Redis Labs Redis 2.4.1
    cpe:2.3:a:redislabs:redis:2.4.1
  • Redis Labs Redis 2.4.2
    cpe:2.3:a:redislabs:redis:2.4.2
  • Redis Labs Redis 2.4.3
    cpe:2.3:a:redislabs:redis:2.4.3
  • Redis Labs Redis 2.4.4
    cpe:2.3:a:redislabs:redis:2.4.4
  • Redis Labs Redis 2.4.5
    cpe:2.3:a:redislabs:redis:2.4.5
  • Redis Labs Redis 2.4.6
    cpe:2.3:a:redislabs:redis:2.4.6
  • Redis Labs Redis 2.4.7
    cpe:2.3:a:redislabs:redis:2.4.7
  • Redis Labs Redis 2.4.8
    cpe:2.3:a:redislabs:redis:2.4.8
  • Redis Labs Redis 2.4.9
    cpe:2.3:a:redislabs:redis:2.4.9
  • Redis Labs Redis 2.4.10
    cpe:2.3:a:redislabs:redis:2.4.10
  • Redis Labs Redis 2.4.11
    cpe:2.3:a:redislabs:redis:2.4.11
  • Redis Labs Redis 2.4.12
    cpe:2.3:a:redislabs:redis:2.4.12
  • Redis Labs Redis 2.4.13
    cpe:2.3:a:redislabs:redis:2.4.13
  • Redis Labs Redis 2.4.14
    cpe:2.3:a:redislabs:redis:2.4.14
  • Redis Labs Redis 2.4.15
    cpe:2.3:a:redislabs:redis:2.4.15
  • Redis Labs Redis 2.4.16
    cpe:2.3:a:redislabs:redis:2.4.16
  • Redis Labs Redis 2.4.17
    cpe:2.3:a:redislabs:redis:2.4.17
  • Redis Labs Redis 2.4.18
    cpe:2.3:a:redislabs:redis:2.4.18
  • Redis Labs Redis 2.6.0
    cpe:2.3:a:redislabs:redis:2.6.0
  • Redis Labs Redis 2.6.0 Release Candidate 1
    cpe:2.3:a:redislabs:redis:2.6.0:rc1
  • Redis Labs Redis 2.6.0 Release Candidate 2
    cpe:2.3:a:redislabs:redis:2.6.0:rc2
  • Redis Labs Redis 2.6.0 Release Candidate 3
    cpe:2.3:a:redislabs:redis:2.6.0:rc3
  • Redis Labs Redis 2.6.0 Release Candidate 4
    cpe:2.3:a:redislabs:redis:2.6.0:rc4
  • Redis Labs Redis 2.6.0 Release Candidate 5
    cpe:2.3:a:redislabs:redis:2.6.0:rc5
  • Redis Labs Redis 2.6.0 Release Candidate 6
    cpe:2.3:a:redislabs:redis:2.6.0:rc6
  • Redis Labs Redis 2.6.0 Release Candidate 7
    cpe:2.3:a:redislabs:redis:2.6.0:rc7
  • Redis Labs Redis 2.6.0 Release Candidate 8
    cpe:2.3:a:redislabs:redis:2.6.0:rc8
  • Redis Labs Redis 2.6.1
    cpe:2.3:a:redislabs:redis:2.6.1
  • Redis Labs Redis 2.6.2
    cpe:2.3:a:redislabs:redis:2.6.2
  • Redis Labs Redis 2.6.3
    cpe:2.3:a:redislabs:redis:2.6.3
  • Redis Labs Redis 2.6.4
    cpe:2.3:a:redislabs:redis:2.6.4
  • Redis Labs Redis 2.6.5
    cpe:2.3:a:redislabs:redis:2.6.5
  • Redis Labs Redis 2.6.6
    cpe:2.3:a:redislabs:redis:2.6.6
  • Redis Labs Redis 2.6.7
    cpe:2.3:a:redislabs:redis:2.6.7
  • Redis Labs Redis 2.6.7-1
    cpe:2.3:a:redislabs:redis:2.6.7-1
  • Redis Labs Redis 2.6.8
    cpe:2.3:a:redislabs:redis:2.6.8
  • Redis Labs Redis 2.6.8-1
    cpe:2.3:a:redislabs:redis:2.6.8-1
  • Redis Labs Redis 2.6.9
    cpe:2.3:a:redislabs:redis:2.6.9
  • Redis Labs Redis 2.6.9-1
    cpe:2.3:a:redislabs:redis:2.6.9-1
  • Redis Labs Redis 2.6.10
    cpe:2.3:a:redislabs:redis:2.6.10
  • Redis Labs Redis 2.6.10-1
    cpe:2.3:a:redislabs:redis:2.6.10-1
  • Redis Labs Redis 2.6.10-2
    cpe:2.3:a:redislabs:redis:2.6.10-2
  • Redis Labs Redis 2.6.10-3
    cpe:2.3:a:redislabs:redis:2.6.10-3
  • Redis Labs Redis 2.6.11
    cpe:2.3:a:redislabs:redis:2.6.11
  • Redis Labs Redis 2.6.12
    cpe:2.3:a:redislabs:redis:2.6.12
  • Redis Labs Redis 2.6.13
    cpe:2.3:a:redislabs:redis:2.6.13
  • Redis Labs Redis 2.6.14
    cpe:2.3:a:redislabs:redis:2.6.14
  • Redis Labs Redis 2.6.14-1
    cpe:2.3:a:redislabs:redis:2.6.14-1
  • Redis Labs Redis 2.6.14-2
    cpe:2.3:a:redislabs:redis:2.6.14-2
  • Redis Labs Redis 2.6.15
    cpe:2.3:a:redislabs:redis:2.6.15
  • Redis Labs Redis 2.6.16
    cpe:2.3:a:redislabs:redis:2.6.16
  • Redis Labs Redis 2.6.17
    cpe:2.3:a:redislabs:redis:2.6.17
  • Redis Labs Redis 2.8.0
    cpe:2.3:a:redislabs:redis:2.8.0
  • Redis Labs Redis 2.8.0 Release Candidate 1
    cpe:2.3:a:redislabs:redis:2.8.0:rc1
  • Redis Labs Redis 2.8.0 Release Candidate 2
    cpe:2.3:a:redislabs:redis:2.8.0:rc2
  • Redis Labs Redis 2.8.0 Release Candidate 3
    cpe:2.3:a:redislabs:redis:2.8.0:rc3
  • Redis Labs Redis 2.8.0 Release Candidate 4
    cpe:2.3:a:redislabs:redis:2.8.0:rc4
  • Redis Labs Redis 2.8.0 Release Candidate 5
    cpe:2.3:a:redislabs:redis:2.8.0:rc5
  • Redis Labs Redis 2.8.0 Release Candidate 6
    cpe:2.3:a:redislabs:redis:2.8.0:rc6
  • Redis Labs Redis 2.8.1
    cpe:2.3:a:redislabs:redis:2.8.1
  • Redis Labs Redis 2.8.2
    cpe:2.3:a:redislabs:redis:2.8.2
  • Redis Labs Redis 2.8.3
    cpe:2.3:a:redislabs:redis:2.8.3
  • Redis Labs Redis 2.8.4
    cpe:2.3:a:redislabs:redis:2.8.4
  • Redis Labs Redis 2.8.5
    cpe:2.3:a:redislabs:redis:2.8.5
  • Redis Labs Redis 2.8.6
    cpe:2.3:a:redislabs:redis:2.8.6
  • Redis Labs Redis 2.8.7
    cpe:2.3:a:redislabs:redis:2.8.7
  • Redis Labs Redis 2.8.8
    cpe:2.3:a:redislabs:redis:2.8.8
  • Redis Labs Redis 2.8.9
    cpe:2.3:a:redislabs:redis:2.8.9
  • Redis Labs Redis 2.8.10
    cpe:2.3:a:redislabs:redis:2.8.10
  • Redis Labs Redis 2.8.11
    cpe:2.3:a:redislabs:redis:2.8.11
  • Redis Labs Redis 2.8.12
    cpe:2.3:a:redislabs:redis:2.8.12
  • Redis Labs Redis 2.8.13
    cpe:2.3:a:redislabs:redis:2.8.13
  • Redis Labs Redis 2.8.14
    cpe:2.3:a:redislabs:redis:2.8.14
  • Redis Labs Redis 2.8.15
    cpe:2.3:a:redislabs:redis:2.8.15
  • Redis Labs Redis 2.8.16
    cpe:2.3:a:redislabs:redis:2.8.16
  • Redis Labs Redis 2.8.17
    cpe:2.3:a:redislabs:redis:2.8.17
  • Redis Labs Redis 2.8.18
    cpe:2.3:a:redislabs:redis:2.8.18
  • Redis Labs Redis 2.8.19
    cpe:2.3:a:redislabs:redis:2.8.19
  • Redis Labs Redis 2.8.20
    cpe:2.3:a:redislabs:redis:2.8.20
  • Redis Labs Redis 2.8.21
    cpe:2.3:a:redislabs:redis:2.8.21
  • Redis Labs Redis 2.8.22
    cpe:2.3:a:redislabs:redis:2.8.22
  • Redis Labs Redis 2.8.23
    cpe:2.3:a:redislabs:redis:2.8.23
  • Redis Labs Redis 2.8.24
    cpe:2.3:a:redislabs:redis:2.8.24
  • Redis Labs Redis 3.0 Alpha 0
    cpe:2.3:a:redislabs:redis:3.0:alpha0
  • Redis Labs Redis 3.0.0
    cpe:2.3:a:redislabs:redis:3.0.0
  • Redis Labs Redis 3.0.0 Beta 1
    cpe:2.3:a:redislabs:redis:3.0.0:beta1
  • Redis Labs Redis 3.0.0 Beta 2
    cpe:2.3:a:redislabs:redis:3.0.0:beta2
  • Redis Labs Redis 3.0.0 Beta 3
    cpe:2.3:a:redislabs:redis:3.0.0:beta3
  • Redis Labs Redis 3.0.0 Beta 4
    cpe:2.3:a:redislabs:redis:3.0.0:beta4
  • Redis Labs Redis 3.0.0 Beta 5
    cpe:2.3:a:redislabs:redis:3.0.0:beta5
  • Redis Labs Redis 3.0.0 Beta 6
    cpe:2.3:a:redislabs:redis:3.0.0:beta6
  • Redis Labs Redis 3.0.0 Beta 7
    cpe:2.3:a:redislabs:redis:3.0.0:beta7
  • Redis Labs Redis 3.0.0 Beta 8
    cpe:2.3:a:redislabs:redis:3.0.0:beta8
  • Redis Labs Redis 3.0.0 Release Candidate 1
    cpe:2.3:a:redislabs:redis:3.0.0:rc1
  • Redis Labs Redis 3.0.0 Release Candidate 2
    cpe:2.3:a:redislabs:redis:3.0.0:rc2
  • Redis Labs Redis 3.0.0 Release Candidate 3
    cpe:2.3:a:redislabs:redis:3.0.0:rc3
  • Redis Labs Redis 3.0.0 Release Candidate 4
    cpe:2.3:a:redislabs:redis:3.0.0:rc4
  • Redis Labs Redis 3.0.0 Release Candidate 5
    cpe:2.3:a:redislabs:redis:3.0.0:rc5
  • Redis Labs Redis 3.0.0 Release Candidate 6
    cpe:2.3:a:redislabs:redis:3.0.0:rc6
  • Redis Labs Redis 3.0.1
    cpe:2.3:a:redislabs:redis:3.0.1
  • Redis Labs Redis 3.0.2
    cpe:2.3:a:redislabs:redis:3.0.2
  • Redis Labs Redis 3.0.3
    cpe:2.3:a:redislabs:redis:3.0.3
  • Redis Labs Redis 3.0.4
    cpe:2.3:a:redislabs:redis:3.0.4
  • Redis Labs Redis 3.0.5
    cpe:2.3:a:redislabs:redis:3.0.5
  • Redis Labs Redis 3.0.6
    cpe:2.3:a:redislabs:redis:3.0.6
  • Redis Labs Redis 3.0.7
    cpe:2.3:a:redislabs:redis:3.0.7
  • Redis Labs Redis 3.2 Release Candidate 1
    cpe:2.3:a:redislabs:redis:3.2:rc1
  • Redis Labs Redis 3.2.0
    cpe:2.3:a:redislabs:redis:3.2.0
  • Redis Labs Redis 3.2.0 Release Candidate 2
    cpe:2.3:a:redislabs:redis:3.2.0:rc2
  • Redis Labs Redis 3.2.0 Release Candidate 3
    cpe:2.3:a:redislabs:redis:3.2.0:rc3
  • Redis Labs Redis 3.2.1
    cpe:2.3:a:redislabs:redis:3.2.1
  • Redis Labs Redis 3.2.2
    cpe:2.3:a:redislabs:redis:3.2.2
  • Redis Labs Redis 3.2.3
    cpe:2.3:a:redislabs:redis:3.2.3
  • Redis Labs Redis 3.2.4
    cpe:2.3:a:redislabs:redis:3.2.4
  • Redis Labs Redis 3.2.5
    cpe:2.3:a:redislabs:redis:3.2.5
  • Redis Labs Redis 3.2.6
    cpe:2.3:a:redislabs:redis:3.2.6
  • Redis Labs Redis 3.2.7
    cpe:2.3:a:redislabs:redis:3.2.7
  • Redis Labs Redis 3.2.8
    cpe:2.3:a:redislabs:redis:3.2.8
  • Redis Labs Redis 3.2.9
    cpe:2.3:a:redislabs:redis:3.2.9
  • Redis Labs Redis 3.2.10
    cpe:2.3:a:redislabs:redis:3.2.10
  • Redis Labs Redis 3.2.11
    cpe:2.3:a:redislabs:redis:3.2.11
  • Redis Labs Redis 3.2.12
    cpe:2.3:a:redislabs:redis:3.2.12
  • Redis Labs Redis 4.0 Release Candidate 1
    cpe:2.3:a:redislabs:redis:4.0:rc1
  • Redis Labs Redis 4.0 Release Candidate 3
    cpe:2.3:a:redislabs:redis:4.0:rc3
  • Redis Labs Redis 4.0.0
    cpe:2.3:a:redislabs:redis:4.0.0
  • Redis Labs Redis 4.0.1
    cpe:2.3:a:redislabs:redis:4.0.1
  • Redis Labs Redis 4.0.2
    cpe:2.3:a:redislabs:redis:4.0.2
  • Redis Labs Redis 4.0.3
    cpe:2.3:a:redislabs:redis:4.0.3
  • Redis Labs Redis 4.0.4
    cpe:2.3:a:redislabs:redis:4.0.4
  • Redis Labs Redis 4.0.5
    cpe:2.3:a:redislabs:redis:4.0.5
  • Redis Labs Redis 4.0.6
    cpe:2.3:a:redislabs:redis:4.0.6
  • Redis Labs Redis 4.0.7
    cpe:2.3:a:redislabs:redis:4.0.7
  • Redis Labs Redis 4.0.8
    cpe:2.3:a:redislabs:redis:4.0.8
  • Redis Labs Redis 4.0.9
    cpe:2.3:a:redislabs:redis:4.0.9
  • Redis Labs Redis 4.0.10
    cpe:2.3:a:redislabs:redis:4.0.10
  • Redis Labs Redis 4.0.11
    cpe:2.3:a:redislabs:redis:4.0.11
CVSS
Base: 5.0
Impact:
Exploitability:
CWE CWE-704
CAPEC
exploit-db via4
description Redis 5.0 - Denial of Service. CVE-2018-12453. Dos exploit for Linux platform
file exploits/linux/dos/44908.txt
id EDB-ID:44908
last seen 2018-06-20
modified 2018-06-20
platform linux
port
published 2018-06-20
reporter Exploit-DB
source https://www.exploit-db.com/download/44908/
title Redis 5.0 - Denial of Service
type dos
packetstorm via4
data source https://packetstormsecurity.com/files/download/148270/redis50-dos.txt
id PACKETSTORM:148270
last seen 2018-06-23
published 2018-06-21
reporter Fakhri Zulkifli
source https://packetstormsecurity.com/files/148270/Redis-5.0-Denial-Of-Service.html
title Redis 5.0 Denial Of Service
refmap via4
misc
Last major update 16-06-2018 - 13:29
Published 16-06-2018 - 13:29
Last modified 14-08-2018 - 13:37
Back to Top