- Vendor / Project
- Redis
- Product
- Debian-specific Redis Servers
- Date added
- Mar 28, 2022
- Due date
- Apr 18, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-862
Description
Redis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.
Required action
Apply updates per vendor instructions.