CVE-2022-0543

CRITICAL10.0⚠ KEVEPSS 94.4%

redis - security update

Published: 2/18/2022Modified: 4/28/2026Added to CISA KEV: 3/28/2022

Description

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

Affected packages (3)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1CRITICAL10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References (7)