Lucene search
Veracode Vulnerability DatabaseVERACODE:34297HistoryFeb 20, 2022 - 2:24 p.m.
Remote Code Execution
2022-02-2014:24:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
58
remote code execution
redis
lua sandbox escape
debian-specific
packaging issue
malicious code
key-value database
EPSS
0.972
Percentile
99.9%
redis is vulnerable to remote code execution. A persistent key-value database is prone to a (Debian-specific) Lua sandbox escape due to a packaging issue allows an attacker to upload and execute malicious code on the targeted system.
References
packetstormsecurity.com/files/166885/Redis-Lua-Sandbox-Escape.html
bugs.debian.org/1005787
lists.debian.org/debian-security-announce/2022/msg00048.html
security-tracker.debian.org/tracker/CVE-2022-0543
security.netapp.com/advisory/ntap-20220331-0004/
www.debian.org/security/2022/dsa-5081
www.ubercomp.com/posts/2022-01-20_redis_on_debian_rce
Related
debiancve
debiancve
CVE-2022-0543
2022-02-18 20:15:17
zdt
zdt
Redis Lua Sandbox Escape Exploit
2022-04-27 00:00:00
f5
f5
K000136079 : Redis vulnerability CVE-2022-0543
2023-09-04 00:00:00
openvas
openvas
Redis RCE Vulnerability (CVE-2022-0543) - Active Check
2022-05-03 00:00:00
Debian: Security Advisory (DSA-5081-1)
2022-02-22 00:00:00
Ubuntu: Security Advisory (USN-5316-1)
2022-03-09 00:00:00
cvelist
cvelist
CVE-2022-0543
2022-02-18 19:25:16
ubuntu
ubuntu
Redis vulnerability
2022-03-08 00:00:00
prion
prion
Remote code execution
2022-02-18 20:15:00
osv
osv
redis vulnerability
2022-03-08 03:54:32
redis - security update
2022-02-18 00:00:00
CGA-j74q-9qc8-6vm3
2024-06-06 12:26:05
nvd
nvd
CVE-2022-0543
2022-02-18 20:15:17
ubuntucve
ubuntucve
CVE-2022-0543
2022-02-18 00:00:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2022-04-29 20:09:07
hivepro
hivepro
A New Cross-Platform ‘P2PInfect’ Worm Threatening Cloud Environments
2023-07-21 08:38:02
Muhstik botnet adds another vulnerability exploit to its arsenal
2022-03-29 12:17:03
Weekly Threat Digest: 21 – 27 March 2022
2022-03-29 13:56:10
githubexploit
githubexploit
Exploit for Missing Authorization in Redis
2022-07-06 04:35:59
Exploit for Vulnerability in Redis
2022-03-18 17:15:19
Exploit for Missing Authorization in Redis
2022-03-16 06:41:50
attackerkb
attackerkb
CVE-2022-0543
2022-02-18 00:00:00
thn
thn
New P2PInfect Worm Targeting Redis Servers on Linux and Windows Systems
2023-07-20 06:12:00
New P2PInfect Worm Targets Redis Servers with Undocumented Breach Methods
2023-07-31 13:38:00
New Threat: Stealthy HeadCrab Malware Compromised Over 1,200 Redis Servers
2023-02-02 06:47:00
packetstorm
packetstorm
Redis Lua Sandbox Escape
2022-04-27 00:00:00
cve
cve
CVE-2022-0543
2022-02-18 20:15:17
nessus
nessus
Ubuntu 20.04 LTS : Redis vulnerability (USN-5316-1)
2022-03-08 00:00:00
Debian DSA-5081-1 : redis - security update
2022-02-21 00:00:00
checkpoint_advisories
checkpoint_advisories
Redis Lua Remote Code Execution (CVE-2022-0543)
2022-03-31 00:00:00
metasploit
metasploit
Redis Lua Sandbox Escape
2022-04-26 10:32:11
cisa_kev
cisa_kev
Debian-specific Redis Server Lua Sandbox Escape Vulnerability
2022-03-28 00:00:00
debian
debian
[SECURITY] [DSA 5081-1] redis security update
2022-02-18 19:05:16
trellix
trellix
The Bug Report - March 2022 Edition
2022-04-06 00:00:00
The Bug Report - March 2022 Edition
2022-04-06 00:00:00