{"id":"CVE-2019-10192","aliases":["ALPINE-CVE-2019-10192","BELL-CVE-2019-10192","DEBIAN-CVE-2019-10192","DLA-1850-1","DSA-4480-1","EUVD-2019-2215","GHSA-pgcv-crqq-f8x5","MGASA-2019-0226","RHSA-2019:1819","RHSA-2019:1860","RHSA-2019:2002","RHSA-2019:2506","RHSA-2019:2508","RHSA-2019:2621","RHSA-2019:2628","RHSA-2019:2630","RLSA-2019:2002","UBUNTU-CVE-2019-10192","UBUNTU-CVE-2019-10193","USN-4061-1"],"status":"published","title":"A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3...","description":"A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.","severity":{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.25616,"percentile":0.97973,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-122","CWE-787"],"published":"2019-07-10T00:00:00Z","modified":"2026-10-24T10:30:52Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"redis","fixed_in":["5.0.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"redis","fixed_in":["5.0.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"redis","fixed_in":["5.0.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"redis","fixed_in":["5.0.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"redis","fixed_in":["5.0.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"redis","fixed_in":["5.0.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"redis","fixed_in":["5.0.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"redis","fixed_in":["5.0.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"redis","fixed_in":["5.0.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"redis","fixed_in":["5.0.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"redis","fixed_in":["4.0.14-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"redis","fixed_in":["4.0.14-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"redis","fixed_in":["4.0.14-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"redis","fixed_in":["5:5.0.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"redis","fixed_in":["5:5.0.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"redis","fixed_in":["5:5.0.4-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"redis","fixed_in":["2:2.8.17-1+deb8u7"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack-optools:9::el7","package":"redis","fixed_in":["0:3.0.6-5.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack-optools:9::el7","package":"redis-debuginfo","fixed_in":["0:3.0.6-5.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:9::el7","package":"redis","fixed_in":["0:3.0.6-5.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:9::el7","package":"redis-debuginfo","fixed_in":["0:3.0.6-5.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"redis","fixed_in":["0:3.2.8-4.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"redis-debuginfo","fixed_in":["0:3.2.8-4.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"redis","fixed_in":["0:3.2.8-4.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"redis-debuginfo","fixed_in":["0:3.2.8-4.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"redis","fixed_in":["0:3.0.6-5.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"redis-debuginfo","fixed_in":["0:3.0.6-5.el7ost"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"redis","fixed_in":["2:3.0.6-1ubuntu0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"redis","fixed_in":["5:4.0.9-1ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"5.0.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"5.0.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"5.0.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"5.0.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"5.0.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"5.0.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"5.0.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"5.0.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"5.0.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"5.0.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"4.0.14-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"4.0.14-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"4.0.14-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.4-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.17-1+deb8u7"}]}],"versions":["2:2.8.17-1","2:2.8.17-1+deb8u1","2:2.8.17-1+deb8u2","2:2.8.17-1+deb8u3","2:2.8.17-1+deb8u4","2:2.8.17-1+deb8u5","2:2.8.17-1+deb8u6"]},{"source":"osv","ecosystem":"Debian:9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:3.2.6-3+deb9u3"}]}],"versions":["3:3.2.6-1","3:3.2.6-2","3:3.2.6-3","3:3.2.6-3+deb9u1","3:3.2.6-3+deb9u2"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.3-4+deb10u1"}]}],"versions":["5:5.0.3-4"],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.14-1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-redis5-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.5-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-redis5-redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.5-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-redis32-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.13-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-redis32-redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.13-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-redis32-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.13-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-redis32-redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.13-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.3-2.module+el8.0.0.z+3657+acb471dc"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.3-2.module+el8.0.0.z+3657+acb471dc"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.3-2.module+el8.0.0.z+3657+acb471dc"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.3-2.module+el8.0.0.z+3657+acb471dc"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.3-2.module+el8.0.0.z+3657+acb471dc"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack-optools:9::el7","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-5.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack-optools:9::el7","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-5.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:9::el7","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-5.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:9::el7","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-5.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.8-4.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.8-4.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.8-4.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.8-4.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-5.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-5.el7ost"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.3-2.module+el8.4.0+393+5af13779"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.6-1ubuntu0.4"}]}],"versions":["2:3.0.3-3","2:3.0.5-1","2:3.0.5-2","2:3.0.5-3","2:3.0.5-4","2:3.0.6-1","2:3.0.6-1ubuntu0.2","2:3.0.6-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:4.0.9-1ubuntu0.2"}]}],"versions":["4:4.0.1-7","4:4.0.2-6","4:4.0.2-9","5:4.0.5-1","5:4.0.6-1","5:4.0.6-2","5:4.0.7-1","5:4.0.8-1","5:4.0.8-2","5:4.0.9-1","5:4.0.9-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.6-1ubuntu0.4"}]}],"versions":["2:3.0.3-3","2:3.0.5-1","2:3.0.5-2","2:3.0.5-3","2:3.0.5-4","2:3.0.6-1","2:3.0.6-1ubuntu0.2","2:3.0.6-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:4.0.9-1ubuntu0.2"}]}],"versions":["4:4.0.1-7","4:4.0.2-6","4:4.0.2-9","5:4.0.5-1","5:4.0.6-1","5:4.0.6-2","5:4.0.7-1","5:4.0.8-1","5:4.0.8-2","5:4.0.9-1","5:4.0.9-1ubuntu0.1"]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"oracle","product":"communications_operations_monitor"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"openstack"},{"vendor":"redhat","product":"software_collections"},{"vendor":"redis","product":"redis"},{"vendor":"redis labs","product":"redis"},{"vendor":"redislabs","product":"redis"}],"references":[{"url":"https://www.debian.org/security/2019/dsa-4480","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://seclists.org/bugtraq/2019/Jul/19","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4061-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://www.securityfocus.com/bid/109290","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1819","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1860","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2002","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201908-04","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2508","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2506","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2621","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2630","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","article","report"]},{"url":"https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","article","report"]},{"url":"https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTES","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","article","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10192","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10192","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pgcv-crqq-f8x5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-10192","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-10192","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-10192","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0226.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25278","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1723918","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727668","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1819.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10192","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10192","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10193","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10193","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594291","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1860.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11218","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11218","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11218","tags":["advisory"]},{"url":"http://antirez.com/news/119","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11219","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11219","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11219","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12326","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12326","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12326","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2002.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2506.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2508.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2621.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2628","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2628.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2630.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2019:2002","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-10192","tags":["report"]},{"url":"https://github.com/antirez/redis/issues/6215","tags":["report"]},{"url":"https://github.com/antirez/redis/commit/e216ceaf0e099536fe3658a29dcb725d812364e0","tags":["report"]},{"url":"https://github.com/antirez/redis/commit/9f13b2bd4967334b1701c6eccdf53760cb13f79e","tags":["report"]},{"url":"https://github.com/antirez/redis/commit/ef1833b3f9d02261617b757fd6ebe0ec3f1be507","tags":["report"]},{"url":"https://github.com/antirez/redis/commit/7f79849caa006f0d760b6c7e17f7796e3be92b4f","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4061-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-10193","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-10192","description":"A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.","status":"published","published":"2019-07-11T18:30:33Z","modified":"2024-08-04T22:17:18.947Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:20:19.399352Z"}],"euvd":[{"id":"EUVD-2019-2215","description":"A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.","status":"published","published":"2019-07-11T18:30:33Z","modified":"2024-08-04T22:17:18Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T02:40:53.61807Z"}],"ghsa":[{"id":"GHSA-pgcv-crqq-f8x5","title":"A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3...","description":"A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.","status":"published","published":"2022-05-24T16:50:03Z","modified":"2023-01-28T05:06:04Z","cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:44:24.376453Z"}],"nvd":[{"id":"CVE-2019-10192","description":"A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.","status":"published","published":"2019-07-11T19:15:12.627Z","modified":"2026-06-17T02:10:27.443Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:05:19.195714Z"}],"osv":[{"id":"ALPINE-CVE-2019-10192","description":"A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.","status":"published","published":"2019-07-11T19:15:12.627Z","modified":"2026-09-21T06:17:52.449373923Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"BELL-CVE-2019-10192","title":"CVE-2019-10192 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:04.518018Z","modified":"2026-01-26T09:46:01.633939Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2019-10192","description":"A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.","status":"published","published":"2019-07-11T19:15:12.627Z","modified":"2026-10-24T10:30:52.866090082Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:10.383287Z"},{"id":"DEBIAN-CVE-2019-10192","description":"A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.","status":"published","published":"2019-07-11T19:15:12.627Z","modified":"2026-09-21T07:01:24.731154874Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.170944Z"},{"id":"RHSA-2019:1819","title":"Red Hat Security Advisory: rh-redis5-redis security update","status":"published","published":"2024-09-13T19:52:56Z","modified":"2026-06-29T10:25:34Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:1860","title":"Red Hat Security Advisory: rh-redis32-redis security update","status":"published","published":"2024-09-13T19:52:50Z","modified":"2026-08-05T10:06:14Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2002","title":"Red Hat Security Advisory: redis:5 security update","status":"published","published":"2024-09-13T19:52:44Z","modified":"2026-06-29T10:25:46Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2506","title":"Red Hat Security Advisory: redis security update","status":"published","published":"2024-09-13T19:53:36Z","modified":"2026-06-29T10:26:03Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2508","title":"Red Hat Security Advisory: redis security update","status":"published","published":"2024-09-13T19:53:17Z","modified":"2026-06-29T10:26:04Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2621","title":"Red Hat Security Advisory: redis security update","status":"published","published":"2024-09-13T19:53:27Z","modified":"2026-06-29T10:26:16Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2628","title":"Red Hat Security Advisory: redis security update","status":"published","published":"2024-09-13T19:53:12Z","modified":"2026-06-29T10:26:18Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2630","title":"Red Hat Security Advisory: redis security update","status":"published","published":"2024-09-13T19:53:33Z","modified":"2026-06-29T10:26:18Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RLSA-2019:2002","title":"Important: redis:5 security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: Heap buffer overflow in HyperLogLog triggered by malicious client (CVE-2019-10192)\n\n* redis: Stack buffer overflow in HyperLogLog triggered by malicious client (CVE-2019-10193)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2019-08-07T10:40:54Z","modified":"2026-02-04T13:45:09.381158Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-10192","description":"A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.","status":"published","published":"2019-07-11T00:00:00Z","modified":"2026-02-04T03:45:00.119262Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:19.202697Z"},{"id":"DLA-1850-1","title":"redis - security update","status":"published","published":"2019-07-10T00:00:00Z","modified":"2026-03-09T01:23:06.730998Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4480-1","title":"redis - security update","status":"published","published":"2019-07-11T00:00:00Z","modified":"2026-03-09T02:08:50.507176Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0226","title":"Updated redis packages fix security vulnerabilities","description":"This update fixes 2 security issues.\n\nA heap-buffer overflow vulnerability was found in the Redis hyperloglog\ndata structure (CVE-2019-10192).\n\nA stack-buffer overflow vulnerability was found in the Redis hyperloglog\ndata structure (CVE-2019-10193).\n","status":"published","published":"2019-08-18T12:39:41Z","modified":"2026-04-16T04:40:37.080391541Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"USN-4061-1","title":"redis vulnerabilities","description":"It was discovered that Redis incorrectly handled the hyperloglog data structure.\nAn attacker could use this issue to cause Redis to crash, resulting in a denial\nof service, or possibly execute arbitrary code.\n","status":"published","published":"2019-07-16T13:47:00Z","modified":"2026-02-10T04:41:34Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}