Redis CVE-2015-4335 EVAL Lua Sandbox Security Bypass Vulnerability

Bugtraq ID:	75034
Class:	Design Error
CVE:	CVE-2015-4335
Remote:	Yes
Local:	No
Published:	Jun 04 2015 12:00AM
Updated:	Mar 07 2017 02:06AM
Credit:	Ben Murphy
Vulnerable:	Redis Redis 0 IBM PowerKVM 3.1 IBM PowerKVM 2.1 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	Redis Redis 3.0.2 Redis Redis 2.8.21

Redis CVE-2015-4335 EVAL Lua Sandbox Security Bypass Vulnerability

Redis is prone to a security-bypass vulnerability.

An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code in context of the affected application.

Redis CVE-2015-4335 EVAL Lua Sandbox Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Redis CVE-2015-4335 EVAL Lua Sandbox Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Redis CVE-2015-4335 EVAL Lua Sandbox Security Bypass Vulnerability

References:

• disable loading lua bytecode (Redis)
  
• Redis Homepage (Citrusbyte)
  
• [release] Redis 3.0.2 and Redis 2.8.21 are out (Salvatore Sanfilippo)
  
• isg3T1024538: Vulnerabilities in redis affect PowerKVM (CVE-2015-4335, CVE-2013- (IBM)
  
• Redis EVAL Lua Sandbox Escape (Ben Murphy)