How severe is CVE-2022-0543?

CVE-2022-0543 has a CVSS 3.1 base score of 10 (CRITICAL). EPSS estimates a 99.4% probability of exploitation in the next 30 days. It is listed in the CISA Known Exploited Vulnerabilities catalog.

CVE-2022-0543: Debian-specific Redis Server Lua Sandbox Escape

CISA Known Exploited Vulnerabilities

Debian-specific Redis Server Lua Sandbox Escape Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.

Added to KEV

2022-03-28

Remediation due

2022-04-18

Required action
Apply updates per vendor instructions.

CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2022-0543

Description

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

Severity

CVSS 3.1 · CISA10 CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC · CISA-ADP

Exploitationactive

Automatableyes

Technical impacttotal

Affected Products

Vendor	Product	Affected versions
Debian	redis	n/a

References

6 Links

Vendor advisories

DSA-5081

Mailing lists

[debian-security-announce] 20220218 [SECURITY] [DSA 5081-1] redis security update

Other references

Record Details

Published

2022-02-18

Last updated

2025-10-21

Assigner (CNA)

debian

Credited to

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.