10.0
Critical
CVE-2022-0543 Debian-specific Redis Server Lua Sandbox Escape Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-862
Description
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| redis | Versions not published |