10.0
Critical
Exploited
CVE-2022-0543 Debian-specific Redis Server Lua Sandbox Escape Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-862
Description
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| redis | Versions not published |
References
- bugs.debian.org bugs.debian.org
- www.ubercomp.com www.ubercomp.com
- [debian-security-announce] 20220218 [SECURITY] [DSA 5081-1] redis security update lists.debian.org
- DSA-5081 www.debian.org
- security.netapp.com security.netapp.com
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified