It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.
CISA Catalog
Date Added
Due Date
Vulnerability Name
Required Action
2022-03-28
2022-04-18
Debian-specific Redis Server Lua Sandbox Escape Vulnerability
Apply updates per vendor instructions.
Date Added: 2022-03-28
Due Date: 2022-04-18
Vulnerability Name: Debian-specific Redis Server Lua Sandbox Escape Vulnerability
Required Action: Apply updates per vendor instructions.