Red Hat Security Advisory

RHSA-2015:1676

redis security advisory

Released 2015-08-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 redis-2.8.21-1.el7ost

TI-2015-03637 CVE-2015-4335 · GHSA-8jrq-fcj6-7g3q

MEDIUM 55

Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09492 Published 2015-06-09 Partial fix CWE-17