NVD

Id
25797  
Name
CVE-2015-4335  
Description
Redis before 2.8.1 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-06-09  
Modified Date
2016-12-30  
Seq
2015-4335  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
136091 25797 CVE-2015-4335 http://benmmurphy.github.io/blog/2015/06/04/redis-eval-lua-sandbox-escape/  View
136092 25797 CVE-2015-4335 FEDORA-2015-9488  View
136093 25797 CVE-2015-4335 FEDORA-2015-9498  View
136094 25797 CVE-2015-4335 openSUSE-SU-2015:1687  View
136095 25797 CVE-2015-4335 RHSA-2015:1676  View
136096 25797 CVE-2015-4335 DSA-3279  View
136097 25797 CVE-2015-4335 [oss-security] 20150604 Re: CVE Request: redis Lua sandbox escape and arbitrary code execution  View
136098 25797 CVE-2015-4335 [oss-security] 20150604 CVE Request: redis Lua sandbox escape and arbitrary code execution  View
136099 25797 CVE-2015-4335 [oss-security] 20150605 Re: CVE Request: redis Lua sandbox escape and arbitrary code execution  View
136100 25797 CVE-2015-4335 75034  View
136101 25797 CVE-2015-4335 https://github.com/antirez/redis/commit/fdf9d455098f54f7666c702ae464e6ea21e25411  View
136102 25797 CVE-2015-4335 https://groups.google.com/forum/#!msg/redis-db/4Y6OqK8gEyk/Dg-5cejl-eUJ  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7716 JVNDB-2015-003036 Redis における任意の Lua バイトコードを実行される脆弱性 Redis には、任意の Lua バイトコードを実行される脆弱性が存在します。 CVE-2015-4335 81560 CVE-2015-4335 25797 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003036.html 2015-06-04 2015-06-12 View