Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2015-4335
HistoryJun 09, 2015 - 12:00 a.m.

CVE-2015-4335

2015-06-0900:00:00
ubuntu.com
ubuntu.com
17

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

88.6%

JSON

Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute
arbitrary Lua bytecode via the eval command.

Bugs

Notes

Author Note
leosilva xenial already has the code patched
OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchredis< 2:2.8.4-2ubuntu0.2UNKNOWN

Related

veracode 1
fedora 2
attackerkb 1
debian 1
redhat 1
cvelist 1
rapid7blog 1
nessus 7
prion 1
freebsd 1
openvas 6
osv 1
securityvulns 1
debiancve 1
mageia 1
cve 1
ibm 1
gentoo 1
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:07:35
fedora
fedora
[SECURITY] Fedora 21 Update: redis-2.8.21-1.fc21
2015-07-18 02:00:48
[SECURITY] Fedora 22 Update: redis-2.8.21-1.fc22
2015-07-18 02:09:58
attackerkb
attackerkb
CVE-2015-4335 — Redis EVAL Lua Sandbox Escape
2015-06-09 00:00:00
debian
debian
[SECURITY] [DSA 3279-1] redis security update
2015-06-06 10:47:47
redhat
redhat
(RHSA-2015:1676) Moderate: redis security advisory
2015-08-24 00:00:00
cvelist
cvelist
CVE-2015-4335
2015-06-09 14:00:00
rapid7blog
rapid7blog
NICER Protocol Deep Dive: Internet Exposure of Redis
2020-11-30 14:14:18
nessus
nessus
FreeBSD : redis -- EVAL Lua Sandbox Escape (838fa84a-0e25-11e5-90e4-d050996490d0)
2015-06-09 00:00:00
Pivotal Software Redis < 2.8.21 / 3.x < 3.0.2 RCE
2018-04-24 00:00:00
Fedora 22 : redis-2.8.21-1.fc22 (2015-9498)
2015-07-20 00:00:00
prion
prion
Command injection
2015-06-09 14:59:00
freebsd
freebsd
redis -- EVAL Lua Sandbox Escape
2015-06-04 00:00:00
openvas
openvas
Fedora Update for redis FEDORA-2015-9498
2015-07-18 00:00:00
Debian Security Advisory DSA 3279-1 (redis - security update)
2015-06-06 00:00:00
Mageia: Security Advisory (MGASA-2015-0244)
2022-01-28 00:00:00
osv
osv
redis - security update
2015-06-06 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3279-1] redis security update
2015-06-08 00:00:00
debiancve
debiancve
CVE-2015-4335
2015-06-09 14:59:00
mageia
mageia
Updated redis package fixes security vulnerability
2015-06-19 16:33:05
cve
cve
CVE-2015-4335
2015-06-09 14:59:00
ibm
ibm
Security Bulletin: Vulnerabilities in redis affect PowerKVM (CVE-2015-4335, CVE-2013-7458)
2018-06-18 01:34:15
gentoo
gentoo
Redis: Multiple vulnerabilities
2017-02-20 00:00:00

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

88.6%

JSON
Related for UB:CVE-2015-4335
veracode1fedora2attackerkb1debian1redhat1cvelist1rapid7blog1nessus7prion1freebsd1openvas6osv1securityvulns1debiancve1mageia1cve1ibm1gentoo1