5477 matches found
The Bug Report - March 2022 Edition
The Bug Report - March 2022 By Charles McFarland · April 6, 2022 Your Cybersecurity Comic Relief Comic from https://geek-and-poke.com/ and remains unedited. https://creativecommons.org/licenses/by/3.0/ Use of this comic does not indicate endorsement by the creator. Why am I here? Welcome back the...
The vulnerability of the redis-server component of the Redis database management system allows a attacker to cause a service failure.
The vulnerability of the redis-server component of the Redis database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions...
Redis Lua Remote Code Execution (CVE-2022-0543)
A remote code execution vulnerability exists in Redis Lua. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Muhstik botnet adds another vulnerability exploit to its arsenal
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Muhstik malware has begun attacking Redis Servers by exploiting a recently reported vulnerability, CVE-2022-0543. This flaw can be found in several Redis Debian packages. The attack began on March 11, 2022, and was carried out...
Muhstik Botnet Targeting Redis Servers Using Recently Disclosed Vulnerability
Muhstik, a botnet infamous for propagating via web application exploits, has been observed targeting Redis servers using a recently disclosed vulnerability in the database system. The vulnerability relates to CVE-2022-0543, a Lua sandbox escape flaw in the open-source, in-memory, key-value data...
Debian-specific Redis Server Lua Sandbox Escape Vulnerability
Redis is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...
VulnCheck KEV: CVE-2022-0543
Redis is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution...
Exploit for Missing Authorization in Redis
CVE-2022-0543 CVE-2022-0543RCE:...
Exploit for Missing Authorization in Redis
CVE-2022-0543 CVE-2022-0543RCE:...
Ubuntu: Security Advisory (USN-5316-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5316-1: Redis vulnerability
Reginaldo Silva discovered that due to a packaging issue, a remote attacker with the ability to execute arbitrary Lua scripts could possibly escape the Lua sandbox and execute arbitrary code on the host...
USN-5316-1 redis vulnerability
Reginaldo Silva discovered that due to a packaging issue, a remote attacker with the ability to execute arbitrary Lua scripts could possibly escape the Lua sandbox and execute arbitrary code on the host...
Ubuntu 20.04 LTS : Redis vulnerability (USN-5316-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5316-1 advisory. Reginaldo Silva discovered that due to a packaging issue, a remote attacker with the ability to execute arbitrary Lua scripts could possibly escape the Lua sandbo...
The vulnerability of the Redis database management system for Debian GNU/Linux operating systems, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of the Redis database management system in Debian GNU/Linux operating systems is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Debian: Security Advisory (DSA-5081-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Vulnerability fixed in redis
A vulnerability has been fixed in the redis packages for Debian. The vulnerability allows a remote malicious person to execute execute arbitrary commands on the underlying system. This vulnerability affects only Debian packages for redis, due to a bug in the Debian specific configuration for the...
Debian DSA-5081-1 : redis - security update
The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5081 advisory. - It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in...
Critical Photon OS Security Update - PHSA-2022-0474
Updates of 'cassandra' packages of Photon OS have been released...
Remote Code Execution
redis is vulnerable to remote code execution. A persistent key-value database is prone to a Debian-specific Lua sandbox escape due to a packaging issue allows an attacker to upload and execute malicious code on the targeted system...