CyberSec.Space Logo
Back to CVE Browser

CVE-2022-0543

🔥 Known Exploited (CISA KEV)CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2022-02-18
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

Affected Platforms (CPE)

📦
Redis

Redis

All versions

References & Advisories

🔗 http://packetstormsecurity.com/files/166885/Redis-Lua-Sandbox-Escape.html
🔗 https://bugs.debian.org/1005787
🔗 https://lists.debian.org/debian-security-announce/2022/msg00048.html
🔗 https://security.netapp.com/advisory/ntap-20220331-0004/
🔗 https://www.debian.org/security/2022/dsa-5081
🔗 https://www.ubercomp.com/posts/2022-01-20_redis_on_debian_rce
🔗 http://packetstormsecurity.com/files/166885/Redis-Lua-Sandbox-Escape.html
🔗 https://bugs.debian.org/1005787

Related Vulnerabilities

CVE-2026-663737.5

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RE...

CVE-2026-592197.1

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0 with Redis configur...

CVE-2026-422013.3

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, datab...

CVE-2026-142657.5

Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0...