Lucene search
K

3321 matches found

Tenable Nessus
Tenable Nessus
added 2022/02/21 12:0 a.m.46 views

Debian DSA-5081-1 : redis - security update

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5081 advisory. - It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in...

10CVSS9AI score0.9967EPSS
Exploits8References7
Veracode
Veracode
added 2022/02/20 2:24 p.m.87 views

Remote Code Execution

redis is vulnerable to remote code execution. A persistent key-value database is prone to a Debian-specific Lua sandbox escape due to a packaging issue allows an attacker to upload and execute malicious code on the targeted system...

10CVSS6.1AI score0.9967EPSS
Exploits8References7Affected Software1
OSV
OSV
added 2022/02/18 8:15 p.m.13 views

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

10CVSS9.9AI score0.9967EPSS
Exploits8References7
OSV
OSV
added 2022/02/18 8:15 p.m.2 views

DEBIAN-CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

10CVSS9.1AI score0.9967EPSS
Exploits8References1
NVD
NVD
added 2022/02/18 8:15 p.m.25 views

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

10CVSS0.9967EPSS
Exploits8References7
Prion
Prion
added 2022/02/18 8:15 p.m.25 views

Remote code execution

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

10CVSS9.7AI score0.9967EPSS
Exploits8References6
UbuntuCve
UbuntuCve
added 2022/02/18 8:15 p.m.68 views

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

10CVSS7.5AI score0.9967EPSS
Exploits8References3
OSV
OSV
added 2022/02/18 8:15 p.m.4 views

UBUNTU-CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

10CVSS7.6AI score0.9967EPSS
Exploits8References4
Vulnrichment
Vulnrichment
added 2022/02/18 7:25 p.m.14 views

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

9.9AI score0.9967EPSS
Exploits8References6
Cvelist
Cvelist
added 2022/02/18 7:25 p.m.36 views

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

9.9AI score0.9967EPSS
Exploits8References6
Debian CVE
Debian CVE
added 2022/02/18 7:25 p.m.69 views

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...

10CVSS9.2AI score0.9967EPSS
Exploits8
CVE
CVE
added 2022/02/18 7:25 p.m.1603 views

CVE-2022-0543

CVE-2022-0543 concerns Redis with a Debian-specific Lua sandbox escape packaging issue that can lead to remote code execution. The vulnerability is described as a Debian packaging problem in Redis, enabling a sandbox escape and potential arbitrary code execution on affected systems. Public adviso...

10CVSS9.7AI score0.9967EPSS
In wildExploits8References7Affected Software1
Debian
Debian
added 2022/02/18 7:5 p.m.38 views

[SECURITY] [DSA 5081-1] redis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5081-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 18, 2022 https://www.debian.org/security/faq -...

10CVSS9.8AI score0.9967EPSS
Exploits8
ATTACKERKB
ATTACKERKB
added 2022/02/18 12:0 a.m.107 views

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution. Recent assessments: NinjaOperator at March 25, 2022 8:04pm UTC reported: Muhstik Gang has been seen exploiting...

10CVSS9.7AI score0.9967EPSS
In wildExploits8References7
Positive Technologies
Positive Technologies
added 2022/02/18 12:0 a.m.6 views

PT-2022-1643

Name of the Vulnerable Software and Affected Versions Redis versions prior to the fixed version Debian-specific Redis Server affected versions not specified Description A Lua sandbox escape vulnerability in Redis could result in remote code execution. The issue is related to a packaging problem a...

10CVSS7.7AI score0.9967EPSS
Exploits8References69
Fedora
Fedora
added 2022/02/17 3:6 a.m.42 views

[SECURITY] Fedora 34 Update: lua-5.4.4-1.fc34

Lua is a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Lua is free software. Lua combines simple procedural syntax with powerful data description constructs based on associative arrays and...

5.5CVSS2.6AI score0.01136EPSS
Exploits2
ATTACKERKB
ATTACKERKB
added 2022/02/11 12:0 a.m.96 views

CVE-2022-24112

An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. When the admin key was changed or the port of Admin API was changed to a port different...

9.8CVSS9.6AI score0.96182EPSS
In wildExploits16References6
Positive Technologies
Positive Technologies
added 2022/02/10 12:0 a.m.5 views

PT-2022-2530

Name of the Vulnerable Software and Affected Versions Redis versions prior to 7.0.0 and 6.2.7 Description The issue is related to weaknesses in the Lua script execution environment in Redis, which can be exploited by a less privileged user to inject Lua code that will execute with potentially...

9.8CVSS7.6AI score0.31049EPSS
Exploits6References133
Veracode
Veracode
added 2022/02/09 6:54 a.m.31 views

Denial Of Service (DoS)

Lua is vulnerable to denial of service. It is affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...

5.5CVSS2.8AI score0.00418EPSS
Exploits1References7Affected Software1
Veracode
Veracode
added 2022/02/09 5:5 a.m.28 views

Denial Of Service (DoS)

lua is vulnerable to denial of service. The vulnerability exists due to Stack overflow in luaresume of ldo.c in Lua Interpreter...

5.5CVSS3.4AI score0.01136EPSS
Exploits1References7Affected Software2
Rows per page
Query Builder