Every CVE Search/ Get API key

CVE-2020-14147

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context...

7.7 HighFix available

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.08%Up 1.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.7

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

Record
CVE-2020-14147
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Weakness
CWE-190, CWE-787
Updated
2026-11-02
CVE List No score

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

Record
CVE-2020-14147
Updated
2026-11-02
EUVDEUVD-2020-6304 No score

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

Record
EUVD-2020-6304
Updated
2026-11-03
GitHub AdvisoriesGHSA-5q54-rrmc-9jrp No score

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context...

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

Record
GHSA-5q54-rrmc-9jrp
Weakness
CWE-190, CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2020-14147 7.7

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

Record
ALPINE-CVE-2020-14147
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-03
OSVAZL-6842 7.7

CVE-2020-14147 affecting package redis for versions less than 5.0.5-7

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

Record
AZL-6842
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVBELL-CVE-2020-14147 7.7

CVE-2020-14147 does not affect BellSoft software

Record
BELL-CVE-2020-14147
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.7

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

Record
CVE-2020-14147
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-14147 7.7

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

Record
DEBIAN-CVE-2020-14147
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-14147 7.7

An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.

Record
UBUNTU-CVE-2020-14147
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2020-0312 No score

Updated redis packages fix security vulnerability

An integer overflow in the getnum function in lua_struct.c CVE-2020-14147

Record
MGASA-2020-0312
Updated
2026-11-02
OSVopenSUSE-SU-2020:1035-1 No score

Security update for redis

This update for redis fixes the following issues:

  • CVE-2020-14147: Context dependent attackers with permission to run Lua code in a Redis session could have caused a denial of service (memory corruption and application crash) or possibly bypass sandbox restrictions (boo#1173018)
Record
openSUSE-SU-2020:1035-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
redis
Alpine:v3.13
 6.0.0 up to 6.0.3-r0
6.0.3-r0
redis
Alpine:v3.14
 6.0.0 up to 6.0.3-r0
6.0.3-r0
redis
Alpine:v3.15
 6.0.0 up to 6.0.3-r0
6.0.3-r0
redis
Alpine:v3.16
 6.0.0 up to 6.0.3-r0
6.0.3-r0
redis
Alpine:v3.17
 6.0.0 up to 6.0.3-r0
6.0.3-r0
redis
Alpine:v3.18
 6.0.0 up to 6.0.3-r0
6.0.3-r0
redis
Alpine:v3.19
 6.0.0 up to 6.0.3-r0
6.0.3-r0
redis
Alpine:v3.20
 6.0.0 up to 6.0.3-r0
6.0.3-r0
redis
Alpine:v3.21
 6.0.0 up to 6.0.3-r0
6.0.3-r0
redis
Alpine:v3.22
 6.0.0 up to 6.0.3-r0
6.0.3-r0
Show 12 moreShow less
Affected packages
PackageAffectedFixed
redis
Alpine:v3.23
 6.0.0 up to 6.0.3-r0
6.0.3-r0
redis
Alpine:v3.24
 6.0.0 up to 6.0.3-r0
6.0.3-r0
redis
Azure Linux:2
 before 5.0.5-7
5.0.5-7
redis
Debian:12
 before 5:6.0.0-1
5:6.0.0-1
redis
Debian:13
 before 5:6.0.0-1
5:6.0.0-1
redis
Debian:14
 before 5:6.0.0-1
5:6.0.0-1
redis
Debian:10
 before 5:5.0.3-4+deb10u2, plus listed versions
5:5.0.3-45:5.0.3-4+deb10u1
5:5.0.3-4+deb10u2
redis
Mageia:7
 before 5.0.9-1.mga7
5.0.9-1.mga7
redis
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5:5.0.5-2build15:5.0.6-15:5.0.7-15:5.0.7-25:5.0.7-2ubuntu0.1~esm1
Show 5 moreShow less
5:5.0.7-2ubuntu0.15:5.0.7-2ubuntu0.1+esm15:5.0.7-2ubuntu0.1+esm25:5.0.7-2ubuntu0.1+esm35:5.0.7-2ubuntu0.1+esm4
 None known
redis
SUSE:Package Hub 12
 before 4.0.14-bp151.3.6.1
4.0.14-bp151.3.6.1
redis
SUSE:Package Hub 15 SP1
 before 4.0.14-bp151.3.6.1
4.0.14-bp151.3.6.1
redis
openSUSE:Leap 15.1
 before 4.0.14-bp151.3.6.1
4.0.14-bp151.3.6.1

History

History
RecordedChangedSources
affectedOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-14147 is a high vulnerability (CVSS 7.7) in Redislabs Redis, published June 15, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.08%, the 87th percentile. Fixed in redis 6.0.3-r0.

References

Show 12 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open