CVE-2022-0543

CVE-2022-0543 is a critical vulnerability in software design or implementation that was first identified in 2022. This flaw, known as a Lua sandbox escape vulnerability, affects Redis instances and has been exploited by P2PInfect, a self-replicating worm written in the Rust programming language. The issue received a severity rating of 10.0 on the Common Vulnerability Scoring System (CVSS), indicating its high risk level. The P2PInfect malware was first detected and documented in July 2023 by Palo Alto Networks Unit 42. Primarily targeting unpatched Redis servers, it exploits CVE-2022-0543 for initial access to the systems. The worm's self-replication capability combined with this vulnerability allows it to spread rapidly, loading a malicious Redis module through an unauthorized replication attack. Since its initial detection, P2PInfect has continued to pose significant threats to Redis servers worldwide. The malware was first disclosed back in July 2023, and despite efforts to mitigate its impact, it continues to exploit the Lua sandbox escape vulnerability (CVE-2022-0543) in unpatched Redis instances. As such, immediate patching and strengthening of security measures are recommended to prevent further exploitation of this vulnerability.