Lucene search

K
redhatRedHatRHSA-2015:1676
HistoryAug 24, 2015 - 12:00 a.m.

(RHSA-2015:1676) Moderate: redis security advisory

2015-08-2400:00:00
access.redhat.com
19

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

86.9%

Redis is an advanced key-value store. It is often referred to as a data
structure server since keys can contain strings, hashes, lists, sets and
sorted sets.

A flaw was discovered in redis that could allow an authenticated user, who
was able to use the EVAL command to run Lua code, to break out of the Lua
sandbox and execute arbitrary code on the system. (CVE-2015-4335)

All users of redis are advised to upgrade to these updated packages, which
correct this issue.

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

86.9%