Launchpad.net

CVE 2015-4335

Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.

CVE-2015-4335 (Candidate) is related to these bugs:

Bug #1467606: EVAL Lua Sandbox Escape (CVE-2015-4335 / DSA-3279)

Summary				In	Importance	Status
	1467606	EVAL Lua Sandbox Escape (CVE-2015-4335 / DSA-3279)		redis (Ubuntu)	Medium	Fix Released
	1467606	EVAL Lua Sandbox Escape (CVE-2015-4335 / DSA-3279)		redis (Ubuntu Trusty)	Medium	New

See the

CVE page on Mitre.org for more details.