Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-39h2-x6c4-6w4c

Опубликовано: 06 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

Lua library commands may lead to remote code execution

Impact

An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution.

The problem exists in all versions of Redis with Lua scripting.

Patches

The problem is fixed in Redis 6.2.x, 7.2.x and 7.4.x.

Workarounds

An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.

Credit

The problem was reported by p33zy working with Trend Micro Zero Day Initiative

Пакеты

Наименование

redis

redis
Затронутые версииВерсия исправления

>=6.2.0, <6.2.17

6.2.17

Наименование

redis

redis
Затронутые версииВерсия исправления

>=7.2.0, <7.2.7

7.2.7

Наименование

redis

redis
Затронутые версииВерсия исправления

>=7.4.0, <7.4.2

7.4.2

EPSS

Процентиль: 94%
0.07802
Низкий

7 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 7
ubuntu
больше 1 года назад

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.

CVSS3: 7
redhat
больше 1 года назад

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.

CVSS3: 7
nvd
больше 1 года назад

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.

CVSS3: 7
msrc
больше 1 года назад

Redis' Lua library commands may lead to remote code execution

CVSS3: 7
debian
больше 1 года назад

Redis is an open source, in-memory database that persists on disk. An ...

EPSS

Процентиль: 94%
0.07802
Низкий

7 High

CVSS3

Дефекты

CWE-416