4236 matches found
CVE-2022-0543
CVE-2022-0543 concerns Redis with a Debian-specific Lua sandbox escape packaging issue that can lead to remote code execution. The vulnerability is described as a Debian packaging problem in Redis, enabling a sandbox escape and potential arbitrary code execution on affected systems. Public adviso...
CVE-2022-0543
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...
CVE-2022-0543
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...
CVE-2022-0543
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...
CVE-2022-0543
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...
[SECURITY] [DSA 5081-1] redis security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5081-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 18, 2022 https://www.debian.org/security/faq -...
Redis Lua Sandbox Escape
This module exploits CVE-2022-0543, a Lua-based Redis sandbox escape. The vulnerability was introduced by Debian and Ubuntu Redis packages that insufficiently sanitized the Lua environment. The maintainers failed to disable the package interface, allowing attackers to load arbitrary libraries. On...
PT-2022-1643
Name of the Vulnerable Software and Affected Versions Redis versions prior to the fixed version Debian-specific Redis Server affected versions not specified Description A Lua sandbox escape vulnerability in Redis could result in remote code execution. The issue is related to a packaging problem a...
CVE-2022-0543
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution. Recent assessments: NinjaOperator at March 25, 2022 8:04pm UTC reported: Muhstik Gang has been seen exploiting...
CVE-2022-0543: Missing Authorization
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...
[SECURITY] Fedora 34 Update: lua-5.4.4-1.fc34
Lua is a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Lua is free software. Lua combines simple procedural syntax with powerful data description constructs based on associative arrays and...
lua:fuzz_lua: Heap-use-after-free in luaH_newkey
Project: https://github.com/lua/lua.git Detailed Report: https://oss-fuzz.com/testcase?key=4831772845146112 Project: lua Fuzzing Engine: afl Fuzz Target: fuzzlua Job Type: aflasanlua Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x61700091add8 Crash State: luaHnewkey...
CVE-2022-24112
An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. When the admin key was changed or the port of Admin API was changed to a port different...
PT-2022-2530
Name of the Vulnerable Software and Affected Versions Redis versions prior to 7.0.0 and 6.2.7 Description The issue is related to weaknesses in the Lua script execution environment in Redis, which can be exploited by a less privileged user to inject Lua code that will execute with potentially...
Denial Of Service (DoS)
Lua is vulnerable to denial of service. It is affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...
Denial Of Service (DoS)
lua is vulnerable to denial of service. The vulnerability exists due to Stack overflow in luaresume of ldo.c in Lua Interpreter...
AlmaLinux 8 : lua (ALSA-2019:3706)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2019:3706 advisory. - Lua 5.3.5 has a use-after-free in luaupvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a...
AlmaLinux 8 : lua (ALSA-2021:4510)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4510 advisory. - ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31. CVE-2020-24370 Note that...
Important Photon OS Security Update - PHSA-2022-0469
Updates of 'linux', 'apache-tomcat', 'linux-esx', 'mariadb' packages of Photon OS have been released...
[SECURITY] Fedora 35 Update: lua-5.4.4-1.fc35
Lua is a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Lua is free software. Lua combines simple procedural syntax with powerful data description constructs based on associative arrays and...