CVE-2015-4335: debian debian_linux DEPRECATED: Code
CVSS: 10.0v2.0HighModified
AliasesMGASA-2015-0244RHSA-2015:1676UBUNTU-CVE-2015-4335DEBIAN-CVE-2015-4335DSA-3279-1
Published 09-06-2015Last modified 06-08-2024
Vulnerability summary
CVE-2015-4335 is a high (CVSS 10.0) DEPRECATED: Code vulnerability in debian debian_linux. EPSS estimates a 9.49% chance of exploitation in the next 30 days, higher than 95.3% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
10.0/10
010
High · v2.0 (NVD)EPSS score
9.49%
0%100%
Low · -0.07 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Timeline
- 09-06-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.
CVSS metrics
1 score · 1 source · 1 versionHigh 10.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
9.49%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
-0.07 pp
From 9.56% on 18-09-2026
18-09-202618-10-2026
EPSS score9.49%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (benmmurphy.github.io)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian2 products
- redis< 2:3.0.2-1 | < 2:2.8.17-1+deb8u1
- debian_linuxEOL8.0 | 9.0
Redhat2 products
- redis< 0:2.8.21-1.el7ost
- redis-debuginfo< 0:2.8.21-1.el7ost
Mageia1 product
- redis< 2.6.5-4.1.mga4
Redislabs1 product
- redis≤ 2.8.20 | 3.0.0 | 3.0.1
Ubuntu1 product
- redis< 2:2.8.4-2ubuntu0.2
5 vendors · 7 products
References
25 links- github.com/antirez/redis/commit/fdf9d455098f54f7666c702ae464e6ea21e25411X Refsource CONFIRMThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2015-July/162146.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- lists.opensuse.org/opensuse-updates/2015-10/msg00014.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2015-July/162094.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- groups.google.com/forum/X Refsource CONFIRM
- www.openwall.com/lists/oss-security/2015/06/05/3Mailing ListX Refsource MLISTThird Party AdvisoryREPORT
Show all 25 references
- benmmurphy.github.io/blog/2015/06/04/redis-eval-lua-sandbox-escape/X Refsource MISCExploitThird Party AdvisoryREPORT
