{"id":"CVE-2022-0543","aliases":["BIT-redis-2022-0543","DEBIAN-CVE-2022-0543","DSA-5081-1","EUVD-2022-15665","GHSA-9wpj-h5jq-88p9","UBUNTU-CVE-2022-0543","USN-5316-1"],"status":"published","title":"It was discovered, that redis, a persistent key-value database, due to a packaging issue, is...","description":"It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.99351,"percentile":0.99939,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-862"],"published":"2022-02-18T00:00:00Z","modified":"2026-11-03T08:00:04Z","kev":{"date_added":"2022-03-28","due_date":"2022-04-18","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-03-28"},{"source":"kev","since":"2022-03-28"}],"exploits":[{"source":"metasploit","id":"exploit/linux/redis/redis_debian_sandbox_escape","title":"Redis Lua Sandbox Escape","type":"exploit","platform":"Linux,Unix","date":"2022-02-18","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/redis/redis_debian_sandbox_escape"},{"source":"pocgithub","id":"0x7eTeam/CVE-2022-0543","title":"0x7eTeam/CVE-2022-0543","date":"2022-03-16","url":"https://github.com/0x7eTeam/CVE-2022-0543"},{"source":"pocgithub","id":"z92g/CVE-2022-0543","title":"z92g/CVE-2022-0543","date":"2022-07-06","url":"https://github.com/z92g/CVE-2022-0543"},{"source":"pocgithub","id":"fulxey/CVE-2022-0543","title":"fulxey/CVE-2022-0543","date":"2022-09-05","url":"https://github.com/fulxey/CVE-2022-0543"},{"source":"pocgithub","id":"SiennaSkies/redisHack","title":"SiennaSkies/redisHack","date":"2023-05-10","url":"https://github.com/SiennaSkies/redisHack"},{"source":"pocgithub","id":"netw0rk7/CVE-2022-0543-Home-Lab","title":"netw0rk7/CVE-2022-0543-Home-Lab","date":"2025-11-18","url":"https://github.com/netw0rk7/CVE-2022-0543-Home-Lab"},{"source":"pocgithub","id":"CyberCTF/vulhub-redis-cve-2022-0543","title":"CyberCTF/vulhub-redis-cve-2022-0543","date":"2026-10-08","url":"https://github.com/CyberCTF/vulhub-redis-cve-2022-0543"},{"source":"nuclei","id":"CVE-2022-0543","title":"Redis Sandbox Escape - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2022/CVE-2022-0543.yaml"}],"fixes":[{"ecosystem":"Debian:12","package":"redis","fixed_in":["5:6.0.16-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"redis","fixed_in":["5:6.0.16-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"redis","fixed_in":["5:6.0.16-2"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"redis","fixed_in":["5:5.0.14-1+deb10u2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"redis","fixed_in":["5:6.0.16-1+deb11u2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"redis","fixed_in":["5:5.0.7-2ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Bitnami","package":"redis"},{"source":"osv","ecosystem":"Debian:12","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.16-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.16-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.16-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.14-1+deb10u2"}]}],"versions":["5:5.0.14-1+deb10u1","5:5.0.3-4","5:5.0.3-4+deb10u1","5:5.0.3-4+deb10u2","5:5.0.3-4+deb10u3","5:5.0.4-1","5:5.0.5-1","5:5.0.5-2","5:5.0.5-2~bpo10+1","5:5.0.6-1","5:5.0.6-1~bpo10+1","5:5.0.7-1","5:5.0.7-1~bpo10+1","5:5.0.7-2","5:5.0.7-3","5:5.0.7-4","5:5.0.7-5","5:5.0.7-6","5:5.0.7-7","5:5.0.7-7~bpo10+1"]},{"source":"osv","ecosystem":"Debian:11","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.16-1+deb11u2"}]}],"versions":["5:6.0.15-1","5:6.0.16-1","5:6.0.16-1+deb11u1","5:6.0.16-1~bpo10+1","5:6.0.16-1~bpo11+1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.7-2ubuntu0.1"}]}],"versions":["5:5.0.5-2build1","5:5.0.6-1","5:5.0.7-1","5:5.0.7-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:5.0.7-2ubuntu0.1"}]}],"versions":["5:5.0.5-2build1","5:5.0.6-1","5:5.0.7-1","5:5.0.7-2"]}],"products":[{"vendor":"debian","product":"redis"},{"vendor":"redis","product":"debian-specific redis servers"},{"vendor":"redis","product":"redis"}],"references":[{"url":"https://bugs.debian.org/1005787","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","web","fix"]},{"url":"https://www.ubercomp.com/posts/2022-01-20_redis_on_debian_rce","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","web","advisory"]},{"url":"https://lists.debian.org/debian-security-announce/2022/msg00048.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","web","advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5081","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Mailing List","Third Party Advisory","web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220331-0004/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","web","advisory"]},{"url":"http://packetstormsecurity.com/files/166885/Redis-Lua-Sandbox-Escape.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry","web","evidence"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0543","tags":["government-resource","US Government Resource","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0543"},{"url":"https://security.netapp.com/advisory/ntap-20220331-0004"},{"url":"https://github.com/advisories/GHSA-9wpj-h5jq-88p9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-0543","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-0543","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5316-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0543","tags":["report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-0543","description":"It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.","status":"published","published":"2022-02-18T19:25:16.932Z","modified":"2025-10-21T23:15:45.813Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:34:41.69911Z"}],"euvd":[{"id":"EUVD-2022-15665","description":"It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.","status":"published","published":"2022-02-18T19:25:16Z","modified":"2025-10-21T23:15:45Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2022-03-28","updated_at":"2026-11-02T20:31:25.901288Z"}],"ghsa":[{"id":"GHSA-9wpj-h5jq-88p9","title":"It was discovered, that redis, a persistent key-value database, due to a packaging issue, is...","description":"It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.","status":"published","published":"2022-02-19T00:01:03Z","modified":"2025-10-22T00:32:30Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:04:05.344883Z"}],"kev":[{"id":"CVE-2022-0543","title":"Debian-specific Redis Server Lua Sandbox Escape Vulnerability","description":"Redis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.","cwes":["CWE-862"],"kev":{"date_added":"2022-03-28","due_date":"2022-04-18","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2022-0543","description":"It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.","status":"published","published":"2022-02-18T20:15:17.583Z","modified":"2026-06-17T04:20:48.593Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:07:12.155838Z"}],"osv":[{"id":"CVE-2022-0543","description":"It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.","status":"published","published":"2022-02-18T20:15:17.583Z","modified":"2026-03-15T22:43:19.293464Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:22.824781Z"},{"id":"DEBIAN-CVE-2022-0543","description":"It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.","status":"published","published":"2022-02-18T20:15:17.583Z","modified":"2026-11-03T08:00:04.811168024Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:25:15.646766Z"},{"id":"UBUNTU-CVE-2022-0543","description":"It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.","status":"published","published":"2022-02-18T20:15:00Z","modified":"2026-02-04T02:44:57.524164Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"BIT-redis-2022-0543","description":"It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.","status":"published","published":"2024-03-06T11:06:37.395Z","modified":"2024-03-06T11:25:28.861Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"DSA-5081-1","title":"redis - security update","status":"published","published":"2022-02-18T00:00:00Z","modified":"2026-03-09T02:10:50.399725Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"USN-5316-1","title":"redis vulnerability","description":"Reginaldo Silva discovered that due to a packaging issue, a remote attacker\nwith the ability to execute arbitrary Lua scripts could possibly escape the\nLua sandbox and execute arbitrary code on the host.\n","status":"published","published":"2022-03-08T03:54:32Z","modified":"2026-02-10T04:42:30Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}