Back to Vulnerability Directory
CRITICALFixed upstream

CVE-2022-0543

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is…

Technology

Redis

CVSS Score

10.0 / 10.0

Affected Versions

See upstream advisory

Upstream Fix

See upstream advisory

Published

February 18, 2022

OSSeva Coverage

Fixed upstream

Description

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

Is your Redis deployment affected?

If you're running See upstream advisory, you need this patch. Book a discovery call to get covered.