Lucene search
Alpine Linux Development TeamALPINE:CVE-2022-28805HistoryApr 08, 2022 - 6:15 a.m.
CVE-2022-28805
2022-04-0806:15:00
Alpine Linux Development Team
security.alpinelinux.org
16
0.003 Low
EPSS
Percentile
68.2%
singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | lua5.4 | < 5.4.4-r4 | UNKNOWN |
| Alpine | 3.14-main | noarch | lua5.4 | < 5.4.3-r1 | UNKNOWN |
| Alpine | 3.15-main | noarch | lua5.4 | < 5.4.3-r1 | UNKNOWN |
| Alpine | 3.16-main | noarch | lua5.4 | < 5.4.4-r4 | UNKNOWN |
| Alpine | 3.17-main | noarch | lua5.4 | < 5.4.4-r4 | UNKNOWN |
| Alpine | 3.18-main | noarch | lua5.4 | < 5.4.4-r4 | UNKNOWN |
| Alpine | 3.19-main | noarch | lua5.4 | < 5.4.4-r4 | UNKNOWN |
Related
veracode
veracode
Denial Of Service (DoS)
2022-05-02 12:21:44
photon
photon
Critical Photon OS Security Update - PHSA-2022-0386
2022-04-22 00:00:00
Critical Photon OS Security Update - PHSA-2022-3.0-0386
2022-04-22 00:00:00
Critical Photon OS Security Update - PHSA-2022-0173
2022-04-21 00:00:00
ibm
ibm
cvelist
cvelist
CVE-2022-28805
2022-04-08 00:00:00
osv
osv
CVE-2022-28805
2022-04-08 06:15:07
Low: lua security update
2023-05-09 00:00:00
BIT-lua-2022-28805
2024-03-06 10:55:38
ubuntucve
ubuntucve
CVE-2022-28805
2022-04-08 00:00:00
nessus
nessus
RHEL 9 : lua (RHSA-2023:2582)
2023-05-13 00:00:00
CBL Mariner 2.0 Security Update: lua (CVE-2022-28805)
2023-03-20 00:00:00
CentOS 9 : lua-5.4.4-3.el9
2024-02-29 00:00:00
cve
cve
CVE-2022-28805
2022-04-08 06:15:00
redhatcve
redhatcve
CVE-2022-28805
2022-04-11 05:14:48
prion
prion
Heap overflow
2022-04-08 06:15:00
oraclelinux
oraclelinux
lua security update
2023-05-15 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-28805 affecting package lua for versions less than 5.4.4-2
2024-03-19 17:21:46
CVE-2022-28805 affecting package lua 5.3.5-8
2022-05-12 02:16:37
CVE-2022-28805 affecting package lua for versions less than 5.4.3-2
2022-06-03 17:54:02
redhat
redhat
(RHSA-2023:2582) Low: lua security update
2023-05-09 05:15:07
(RHSA-2023:3905) Important: Network observability 1.3.0 for Openshift
2023-06-28 15:41:08
debiancve
debiancve
CVE-2022-28805
2022-04-08 06:15:00
almalinux
almalinux
Low: lua security update
2023-05-09 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: lua-5.4.4-3.fc35
2022-08-04 01:37:59
[SECURITY] Fedora 36 Update: lua-5.4.4-3.fc36
2022-07-26 16:15:00
openvas
openvas
Fedora: Security Advisory for lua (FEDORA-2022-b9ed35a7ad)
2022-07-27 00:00:00
Fedora: Security Advisory for lua (FEDORA-2022-5b5889f43a)
2022-08-05 00:00:00
gentoo
gentoo
Lua: Multiple Vulnerabilities
2023-05-03 00:00:00