CVE-2018-12453 | BDVDB-2026-102714 Detail

Description#

Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0 allows remote attackers to cause denial-of-service via an XGROUP command in which the key is not a stream.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/44908/
https://gist.github.com/fakhrizulkifli/34a56d575030682f6c564553c53b82b5
https://github.com/antirez/redis/commit/c04082cf138f1f51cedf05ee9ad36fb6763cafc6

Exploit#

https://www.exploit-db.com/exploits/44908/

History#

Version 12018-06-16Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.