Live › vulnerability › CVE-2022-0543
Go to dashboardDebian's packaged Redis server has a Lua sandbox escape that lets a script break out of the sandbox. An attacker who can run Lua on the server can execute code as the Redis process.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Redis Debian-specific Redis Servers | vendor | – | – |
Unknown from the sources.
Apply the Debian security update for the redis packages per vendor instructions (CISA required action); the exact package version is unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.
This page as .md · .json · in your agent: get_signal("CVE-2022-0543")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.