CVE-2022-0543VulnerabilityPublished 03/28/2022Updated 10/24/2026

CVE-2022-0543: Debian-specific Redis Server Lua Sandbox Escape Vulnerability

Affects Redis Debian-specific Redis ServersSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/28/2022
KEV deadline: 04/18/2022
EPSS: 99.4% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2022-0543 (opens in a new tab)

Description

CVE-2022-0543 is a high-severity vulnerability affecting Debian-specific Redis Server installations. It involves a Lua sandbox escape that could allow an attacker to execute remote code on the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Summary

The vulnerability identified as CVE-2022-0543 affects Redis servers specifically packaged for Debian. It allows an attacker to escape the Lua sandbox environment, which is intended to restrict Lua script execution, potentially leading to remote code execution on the host system. This issue is specific to Debian's Redis server packaging and has been observed to be exploited in real-world attacks. No detailed patch or remediation information is provided in the input data.

Impact

Successful exploitation of this vulnerability can lead to remote code execution on Debian-specific Redis servers, potentially allowing attackers to execute arbitrary commands with the privileges of the Redis server process. This can compromise the affected system's confidentiality, integrity, and availability.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until official fixes or updates are available, administrators should monitor Redis server usage closely and consider restricting access to Redis instances to trusted networks only.

Weaknesses

CWE-862Missing Authorization (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:12:20 UTC

Weaknesses

References

Related threats