Ubercomp personal blog

An unexpected Redis sandbox escape affecting Debian-based distros

This post describes how I broke the Redis sandbox, but only for Debian and Debian-derived Linux distributions. Upstream Redis is not affected. That makes it a Debian vulnerability, not a Redis one. The culprit, if you will, is dynamic linking, but there will be more on that later.
Points
154
HN comments
59
Submissions
1
Cited by
0 commenters

Security & Privacy2022

On Hacker News

SubmittedTitle on HNPointsComments
Mar 9, 2022An unexpected Redis sandbox escape affecting Debian-based distros by reginaldo15459

More from Ubercomp

All 2 posts →

Related posts from the same era