CVE-2015-8080

Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.

• CWE-190

• http://lists.opensuse.org/opensuse-updates/2016-05/msg00126.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0095.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0096.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0097.htmlThird Party Advisory
• http://www.debian.org/security/2015/dsa-3412Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/11/06/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/11/06/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/77507Third Party Advisory, VDB Entry
• https://github.com/antirez/redis/issues/2855Exploit, Issue Tracking, Patch, Third Party Advisory
• https://raw.githubusercontent.com/antirez/redis/2.8/00-RELEASENOTESRelease Notes, Third Party Advisory
• https://raw.githubusercontent.com/antirez/redis/3.0/00-RELEASENOTESRelease Notes, Third Party Advisory
• https://security.gentoo.org/glsa/201702-16Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2016-05/msg00126.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0095.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0096.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0097.htmlThird Party Advisory
• http://www.debian.org/security/2015/dsa-3412Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/11/06/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/11/06/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/77507Third Party Advisory, VDB Entry
• https://github.com/antirez/redis/issues/2855Exploit, Issue Tracking, Patch, Third Party Advisory
• https://raw.githubusercontent.com/antirez/redis/2.8/00-RELEASENOTESRelease Notes, Third Party Advisory
• https://raw.githubusercontent.com/antirez/redis/3.0/00-RELEASENOTESRelease Notes, Third Party Advisory
• https://security.gentoo.org/glsa/201702-16Third Party Advisory

Published

Apr 13, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8074mediaserver in Android before 5.1.1 LMY48X allows remote att…
• CVE-2015-8075Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-8076The index_urlfetch function in index.c in Cyrus IMAP 2.3.x b…
• CVE-2015-8077Integer overflow in the index_urlfetch function in imap/inde…
• CVE-2015-8078Integer overflow in the index_urlfetch function in imap/inde…
• CVE-2015-8079qt5-qtwebkit before 5.4 records private browsing URLs to its…5.3
• CVE-2015-8081The Field as Block module 7.x-1.x before 7.x-1.4 for Drupal …
• CVE-2015-8082The Login Disable module 6.x-1.x before 6.x-1.1 and 7.x-1.x …
• CVE-2015-8083An unspecified module in Huawei eSpace U1910, U1911, U1930, …
• CVE-2015-8084Huawei USG5500, USG2100, USG2200, and USG5100 unified securi…
• CVE-2015-8085Huawei AR routers with software before V200R007C00SPC100; Qu…
• CVE-2015-8086Huawei AR routers with software before V200R007C00SPC100; Qu…