CVE-2015-4335

Description

References

• benmmurphy.github.io/blog/2015/06/04/redis-eval-lua-sandbox-escape · Exploit
• lists.fedoraproject.org/pipermail/package-announce/2015-July/162094.html · Third Party Advisory
• lists.fedoraproject.org/pipermail/package-announce/2015-July/162146.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2015-10/msg00014.html · Third Party Advisory
• rhn.redhat.com/errata/RHSA-2015-1676.html · Third Party Advisory
• debian.org/security/2015/dsa-3279 · Third Party Advisory
• openwall.com/lists/oss-security/2015/06/04/12 · Mailing List
• openwall.com/lists/oss-security/2015/06/04/8 · Mailing List
• openwall.com/lists/oss-security/2015/06/05/3 · Mailing List
• securityfocus.com/bid/75034 · Third Party Advisory
• antirez/redis commit fdf9d45

Autres vulnérabilités de redis

• CVE-2020-21468ÉLEVÉE 7.5A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS). NOTE: the vendor cannot reproduce this…
• CVE-2021-32761ÉLEVÉE 7.5Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow e…
• CVE-2021-32625ÉLEVÉE 8.8Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow b…
• CVE-2021-29478ÉLEVÉE 8.8Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow b…
• CVE-2021-29477ÉLEVÉE 8.8Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow b…