Lucene search
Gentoo FoundationMGASA-2015-0244HistoryJun 19, 2015 - 4:33 p.m.
Updated redis package fixes security vulnerability
2015-06-1916:33:05
Gentoo Foundation
advisories.mageia.org
11
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.019 Low
EPSS
Percentile
88.6%
It was discovered that redis, a persistent key-value database, could execute insecure Lua bytecode by way of the EVAL command. This could allow remote attackers to break out of the Lua sandbox and execute arbitrary code (CVE-2015-4335).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | redis | < 2.6.5-4.1 | redis-2.6.5-4.1.mga4 |
Related
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:07:35
fedora
fedora
[SECURITY] Fedora 21 Update: redis-2.8.21-1.fc21
2015-07-18 02:00:48
[SECURITY] Fedora 22 Update: redis-2.8.21-1.fc22
2015-07-18 02:09:58
prion
prion
Command injection
2015-06-09 14:59:00
rapid7blog
rapid7blog
NICER Protocol Deep Dive: Internet Exposure of Redis
2020-11-30 14:14:18
nessus
nessus
FreeBSD : redis -- EVAL Lua Sandbox Escape (838fa84a-0e25-11e5-90e4-d050996490d0)
2015-06-09 00:00:00
Pivotal Software Redis < 2.8.21 / 3.x < 3.0.2 RCE
2018-04-24 00:00:00
Fedora 22 : redis-2.8.21-1.fc22 (2015-9498)
2015-07-20 00:00:00
freebsd
freebsd
redis -- EVAL Lua Sandbox Escape
2015-06-04 00:00:00
attackerkb
attackerkb
CVE-2015-4335 — Redis EVAL Lua Sandbox Escape
2015-06-09 00:00:00
debian
debian
[SECURITY] [DSA 3279-1] redis security update
2015-06-06 10:47:47
redhat
redhat
(RHSA-2015:1676) Moderate: redis security advisory
2015-08-24 00:00:00
cvelist
cvelist
CVE-2015-4335
2015-06-09 14:00:00
openvas
openvas
Fedora Update for redis FEDORA-2015-9498
2015-07-18 00:00:00
Debian Security Advisory DSA 3279-1 (redis - security update)
2015-06-06 00:00:00
Mageia: Security Advisory (MGASA-2015-0244)
2022-01-28 00:00:00
osv
osv
redis - security update
2015-06-06 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3279-1] redis security update
2015-06-08 00:00:00
ubuntucve
ubuntucve
CVE-2015-4335
2015-06-09 00:00:00
debiancve
debiancve
CVE-2015-4335
2015-06-09 14:59:00
cve
cve
CVE-2015-4335
2015-06-09 14:59:00
ibm
ibm
gentoo
gentoo
Redis: Multiple vulnerabilities
2017-02-20 00:00:00
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.019 Low
EPSS
Percentile
88.6%
Related for MGASA-2015-0244