Lucene search
UbuntuUSN-5316-1HistoryMar 08, 2022 - 12:00 a.m.
Redis vulnerability
2022-03-0800:00:00
ubuntu.com
290
Releases
- Ubuntu 21.10
- Ubuntu 20.04 LTS
Packages
- redis - Persistent key-value database with network interface
Details
Reginaldo Silva discovered that due to a packaging issue, a remote attacker
with the ability to execute arbitrary Lua scripts could possibly escape the
Lua sandbox and execute arbitrary code on the host.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 21.10 | noarch | redis-server | < 5:6.0.15-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | redis | < 5:6.0.15-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | redis-sentinel | < 5:6.0.15-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | redis-tools | < 5:6.0.15-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | redis-tools-dbgsym | < 5:6.0.15-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | redis-server | < 5:5.0.7-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | redis | < 5:5.0.7-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | redis-sentinel | < 5:5.0.7-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | redis-tools | < 5:5.0.7-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | redis-tools-dbgsym | < 5:5.0.7-2ubuntu0.1 | UNKNOWN |
References
Related
attackerkb
attackerkb
CVE-2022-0543
2022-02-18 00:00:00
thn
thn
New P2PInfect Worm Targets Redis Servers with Undocumented Breach Methods
2023-07-31 13:38:00
New P2PInfect Worm Targeting Redis Servers on Linux and Windows Systems
2023-07-20 06:12:00
New Threat: Stealthy HeadCrab Malware Compromised Over 1,200 Redis Servers
2023-02-02 06:47:00
packetstorm
packetstorm
Redis Lua Sandbox Escape
2022-04-27 00:00:00
githubexploit
githubexploit
Exploit for Missing Authorization in Redis
2022-03-16 06:41:50
Exploit for Missing Authorization in Redis
2022-07-06 04:35:59
Exploit for Vulnerability in Redis
2022-03-18 17:15:19
hivepro
hivepro
A New Cross-Platform ‘P2PInfect’ Worm Threatening Cloud Environments
2023-07-21 08:38:02
Muhstik botnet adds another vulnerability exploit to its arsenal
2022-03-29 12:17:03
Weekly Threat Digest: 21 – 27 March 2022
2022-03-29 13:56:10
rapid7blog
rapid7blog
Metasploit Wrap-Up
2022-04-29 20:09:07
osv
osv
redis - security update
2022-02-18 00:00:00
BIT-redis-2022-0543
2024-03-06 11:06:37
redis vulnerability
2022-03-08 03:54:32
openvas
openvas
Debian: Security Advisory (DSA-5081-1)
2022-02-22 00:00:00
Ubuntu: Security Advisory (USN-5316-1)
2022-03-09 00:00:00
Redis RCE Vulnerability (CVE-2022-0543) - Active Check
2022-05-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Redis Lua Remote Code Execution (CVE-2022-0543)
2022-03-31 00:00:00
veracode
veracode
Remote Code Execution
2022-02-20 14:24:06
nessus
nessus
Ubuntu 20.04 LTS : Redis vulnerability (USN-5316-1)
2022-03-08 00:00:00
Debian DSA-5081-1 : redis - security update
2022-02-21 00:00:00
cve
cve
CVE-2022-0543
2022-02-18 20:15:00
metasploit
metasploit
Redis Lua Sandbox Escape
2022-04-26 10:32:11
cisa_kev
cisa_kev
Debian-specific Redis Server Lua Sandbox Escape Vulnerability
2022-03-28 00:00:00
debian
debian
[SECURITY] [DSA 5081-1] redis security update
2022-02-18 19:05:36
ubuntucve
ubuntucve
CVE-2022-0543
2022-02-18 00:00:00
prion
prion
Remote code execution
2022-02-18 20:15:00
f5
f5
K000136079 : Redis vulnerability CVE-2022-0543
2023-09-04 00:00:00
cvelist
cvelist
CVE-2022-0543
2022-02-18 00:00:00
zdt
zdt
Redis Lua Sandbox Escape Exploit
2022-04-27 00:00:00
debiancve
debiancve
CVE-2022-0543
2022-02-18 20:15:00
trellix
trellix
The Bug Report - March 2022 Edition
2022-04-06 00:00:00
The Bug Report - March 2022 Edition
2022-04-06 00:00:00