DSA-5081: -1 redis -- security update
Published Feb 18, 2022
·Updated
redis - security update
Other sources
Reginaldo Silva discovered a (Debian-specific) Lua sandbox escape in Redis, a persistent key-value database.
Affected Software
2 affected components
debian/redis
debian/redis
Event History
Feb 18, 2022
Advisory Published
12:00 AM
Frequently Asked Questions
1
Which deployments are exposed to this issue?
The issue is described as a Debian-specific Lua sandbox escape in Redis. The provided information identifies Debian Redis packages as affected but does not specify particular versions or configurations.
2
What capability does an attacker need to exploit it?
The available information only identifies the flaw as a Lua sandbox escape. It does not state the access level, Redis commands, or authentication conditions required for exploitation.