The vulnerability of Lua script interpreters arises from the possibility of an operation exceeding the buffer boundaries in memory, allowing attackers to trigger a service failure.

🗓️ 17 Jul 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 58 Views

Lua script interpreter vulnerability allows buffer overrun in memory, risking service failure.

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: A buffer overread, security restrictions bypass, a use-after-free, and other vulnerabilities might affect IBM Storage Defender – Resiliency Service	25 Mar 202523:50	–	ibm
CBLMariner	CVE-2020-15945 affecting package lua 5.3.5-9	12 Jan 202509:15	–	cbl_mariner
CBLMariner	CVE-2020-15945 affecting package lua for versions less than 5.4.0-1	5 Feb 202522:13	–	cbl_mariner
CBLMariner	CVE-2020-15945 affecting package lua for versions less than 5.4.3-1	9 Apr 202206:51	–	cbl_mariner
CVE	CVE-2020-15945	24 Jul 202020:05	–	cve
Cvelist	CVE-2020-15945	24 Jul 202020:05	–	cvelist
Debian CVE	CVE-2020-15945	24 Jul 202020:05	–	debiancve
EUVD	EUVD-2020-7916	7 Oct 202500:30	–	euvd
Microsoft CVE	Lua through 5.4.0 has a segmentation fault in changedline in ldebug.c (e.g. when called by luaG_traceexec) because it incorrectly expects that an oldpc value is always updated upon a return of the flow of control to a function.	16 Dec 202108:00	–	mscve
NVD	CVE-2020-15945	24 Jul 202021:15	–	nvd

Vulners

Node

red_hat red_hat_ceph_storageMatch3

OR

red_hat red_hat_ceph_storageMatch4

OR

novell suse_linux_enterprise_microMatch6.0

OR

novell suse_linux_enterprise_microMatch6.1

OR

software_in_the_public_interest luaRange5.3.1–5.4.0

Source	Link
lua-users	www.lua-users.org/lists/lua-l/2020-07/msg00123.html
github	www.github.com/lua/lua/commit/a2195644d89812e5b157ce7bac35543e06db05e3
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-lua-cve-2020-15945/
access	www.access.redhat.com/security/cve/CVE-2020-15945
suse	www.suse.com/security/cve/CVE-2020-15945.html
web	www.web.nvd.nist.gov/view/vuln/detail

17 Jul 2025 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.6

CVSS 35.5

EPSS0.00533

Lua script vulnerability buffer overrun memory corruption service failure