CVE-2018-11218

Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows.

• CWE-787

• http://antirez.com/news/119Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/104553Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2019:0052Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:0094Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:1860
• https://github.com/antirez/redis/commit/52a00201fca331217c3b4b8b634f6a0f57d6b7d3Exploit, Patch, Third Party Advisory
• https://github.com/antirez/redis/commit/5ccb6f7a791bf3490357b00a898885759d98bab0Patch, Third Party Advisory
• https://github.com/antirez/redis/issues/5017Third Party Advisory
• https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTESThird Party Advisory
• https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTESThird Party Advisory
• https://security.gentoo.org/glsa/201908-04
• https://www.debian.org/security/2018/dsa-4230Third Party Advisory
• https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatch, Third Party Advisory
• http://antirez.com/news/119Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/104553Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2019:0052Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:0094Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:1860
• https://github.com/antirez/redis/commit/52a00201fca331217c3b4b8b634f6a0f57d6b7d3Exploit, Patch, Third Party Advisory
• https://github.com/antirez/redis/commit/5ccb6f7a791bf3490357b00a898885759d98bab0Patch, Third Party Advisory
• https://github.com/antirez/redis/issues/5017Third Party Advisory
• https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTESThird Party Advisory
• https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTESThird Party Advisory
• https://security.gentoo.org/glsa/201908-04
• https://www.debian.org/security/2018/dsa-4230Third Party Advisory
• https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatch, Third Party Advisory

Published

Jun 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1121procps-ng, procps is vulnerable to a process hiding through …3.9
• CVE-2018-11210TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLD…
• CVE-2018-11212An issue was discovered in libjpeg 9a and 9d. The alloc_sarr…
• CVE-2018-11213An issue was discovered in libjpeg 9a. The get_text_gray_row…
• CVE-2018-11214An issue was discovered in libjpeg 9a. The get_text_rgb_row …
• CVE-2018-11215Remote code execution is possible in Cloudera Data Science W…
• CVE-2018-11219An Integer Overflow issue was discovered in the struct libra…
• CVE-2018-1122procps-ng before version 3.3.15 is vulnerable to a local pri…7.3
• CVE-2018-11220Bitmain Antminer D3, L3+, and S9 devices allow Remote Comman…
• CVE-2018-11221Unauthenticated untrusted file upload in Artica Pandora FMS …
• CVE-2018-11222Local File Inclusion (LFI) in Artica Pandora FMS through ver…
• CVE-2018-11223XSS in Artica Pandora FMS before 7.0 NG 723 allows an attack…