PT-2015-1300 · Redis+1 · Redis+1

Ben Murphy · Published 2015-06-06 · Updated 2018-08-13 · CVE-2015-4335

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Redis versions prior to 2.8.21 Redis versions 3.x prior to 3.0.2

Description The issue allows remote attackers to execute arbitrary Lua bytecode via the eval command. It is related to incorrect data type conversion in the deps/lua/src/ldo.c component of the Redis database management system. Exploitation of the issue may allow a remote attacker to execute arbitrary Lua bytecode using a specially crafted eval command.

Recommendations For Redis versions prior to 2.8.21, update to version 2.8.21 or later. For Redis versions 3.x prior to 3.0.2, update to version 3.0.2 or later. As a temporary workaround, consider restricting access to the eval command until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-17

CWE-136

Related Identifiers

ALT-PU-2015-1492

AZL-44232

BDU:2015-10357

CVE-2015-4335

DSA-3279-1

MGASA-2015-0244

RHSA-2015:1676

Affected Products

Alt Linux

Redis

References · 27

• 🔥 http://benmmurphy.github.io/blog/2015/06/04/redis-eval-lua-sandbox-escape · Exploit
• https://osv.dev/vulnerability/DSA-3279-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-4335 · Security Note
• http://debian.org/security/2015/dsa-3279 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1676.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2015-10/msg00014.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2015-0244 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162094.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-4335 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-4335 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2015-4335 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10357 · Security Note
• https://security.gentoo.org/glsa/201702-16 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-4335 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162146.html · Vendor Advisory