CVE-2015-4335: Debian Linux

High severity, CVSS 10.0. EPSS: 9.5% chance of exploitation in the next 30 days.

Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Redislabs Redis: up to and including 2.8.20; version 3.0.0 only; version 3.0.1 only

Published 2015-06-09. Last modified 2026-06-17.