Code Injection in redis (Debian package) - CVE-2022-0543
Published: February 21, 2022 / Updated: January 2, 2024
Vulnerability identifier: #VU60741
CSH Severity: Medium
CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-0543
CWE-ID: CWE-94
Exploitation vector: Remote access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to improper input validation, related to Linux Debian specific Lua sandbox escape. A remote attacker with ability to control data stored in the Redis database can inject and execute arbitrary code on the system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
redis (Debian package)
redis-server (Ubuntu package)
redis (Ubuntu package)
Ubuntu
redis-server (Ubuntu package)
redis (Ubuntu package)
Ubuntu
How to mitigate CVE-2022-0543
Install updates from vendor's website.
redis (Debian package) - addressed in versions 5:5.0.14-1+deb10u2, 5:6.0.16-1+deb11u2
redis-server (Ubuntu package) - addressed in versions 5:5.0.7-2ubuntu0.1, 5:6.0.15-1ubuntu0.1
redis (Ubuntu package) - addressed in versions 5:5.0.7-2ubuntu0.1, 5:6.0.15-1ubuntu0.1
redis-server (Ubuntu package) - addressed in versions 5:5.0.7-2ubuntu0.1, 5:6.0.15-1ubuntu0.1
redis (Ubuntu package) - addressed in versions 5:5.0.7-2ubuntu0.1, 5:6.0.15-1ubuntu0.1
Links to Public Exploits and PoC-codes
- Exploit #9477 - CVE-2022-0543 (CVE-2022-0543_RCE,Redis Lua沙盒绕过 命令执行) (January 2, 2024)
- Exploit #8332 - CVE-2022-0543 (Redis RCE through Lua Sandbox Escape vulnerability) (September 3, 2022)
- Exploit #8120 - CVE-2022-0543 (Redis 沙盒逃逸（CVE-2022-0543）POC&EXP) (July 6, 2022)
- Exploit #7779 - Redis Lua Sandbox Escape (May 12, 2022)
- Exploit #7706 - Redis Lua Sandbox Escape (April 28, 2022)
- Exploit #7522 - REDIS-CVE-2022-0543 (Redis沙盒逃逸漏洞复现(CVE-2022-0543)) (March 20, 2022)
- Exploit #7513 - CVE-2022-0543 (CVE-2022-0543_RCE,Redis Lua沙盒绕过 命令执行) (March 17, 2022)