CVE-2015-4335
Fixed in a distro release EPSS 9%
Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.
Products: redislabs redis, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | redis | 2:3.0.2-1 |
| Debian 13 | redis | 2:3.0.2-1 |
| Debian 14 | redis | 2:3.0.2-1 |
| Debian 8 | redis | 2:2.8.17-1+deb8u1 |
| Red Hat openstack 6 | redis | 0:2.8.21-1.el7ost |
| Red Hat openstack 6 | redis-debuginfo | 0:2.8.21-1.el7ost |
| Ubuntu 14.04 LTS | redis | 2:2.8.4-2ubuntu0.2 |