ID:6352 - Exploit for Buffer overflow in Redis - CVE-2018-12326

 
Main Vulnerability Database Exploits ID:6352 - Exploit for Buffer overflow in Redis - CVE-2018-12326

ID:6352 - Exploit for Buffer overflow in Redis - CVE-2018-12326

Published: June 17, 2021


Vulnerability identifier: #VU13401
Vulnerability risk: Low
CVE-ID: CVE-2018-12326
CWE-ID: CWE-120
Exploitation vector: Local access
Vulnerable software:
Redis

Link to public exploit:


Vulnerability description

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The vulnerability exists due to a buffer overflow condition in the redis-clicomponent. A local attacker can execute a specially crafted command that submits malicious input, trigger memory corruption and execute arbitrary code with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Update to version 4.0.10, 5.0 RC3.