CVE-2015-4335

CVE-2015-4335, security advisory, suse linux, suse, security, cve

CVE-2015-4335

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2015-4335 at MITRE

Description

Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.

---

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having critical severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	10
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
Access Vector	Network
Access Complexity	Low
Authentication	None
Confidentiality Impact	Complete
Integrity Impact	Complete
Availability Impact	Complete

SUSE Bugzilla entry: 934048 [RESOLVED / FIXED]

SUSE Security Advisories:

openSUSE-SU-2015:1687-1

---

SUSE Timeline for this CVE

CVE page created: Fri Jun 5 13:33:25 2015
CVE page last modified: Thu Dec 7 13:08:55 2023