CVE-2015-4335
- State
- Published
- Severity
- Not scored
- Published
- Jun 9, 2015
- Updated
- Aug 6, 2024
- Reserved
- Jun 5, 2015
Description
Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://github.com/antirez/redis/commit/fdf9d455098f54f7666c702ae464e6ea21e25411
- FEDORA-2015-9498vendor-advisory
- [oss-security] 20150604 CVE Request: redis Lua sandbox escape and arbitrary code executionmailing-list
- [oss-security] 20150604 Re: CVE Request: redis Lua sandbox escape and arbitrary code executionmailing-list
- openSUSE-SU-2015:1687vendor-advisory
- FEDORA-2015-9488vendor-advisory
- RHSA-2015:1676vendor-advisory
- https://groups.google.com/forum/#%21msg/redis-db/4Y6OqK8gEyk/Dg-5cejl-eUJ
- 75034vdb-entry
- [oss-security] 20150605 Re: CVE Request: redis Lua sandbox escape and arbitrary code executionmailing-list
- GLSA-201702-16vendor-advisory
- http://benmmurphy.github.io/blog/2015/06/04/redis-eval-lua-sandbox-escape/
- DSA-3279vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.