Lucene search
MitreCVELIST:CVE-2022-28805HistoryApr 08, 2022 - 12:00 a.m.
CVE-2022-28805
2022-04-0800:00:00
mitre
www.cve.org
singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.
References
github.com/lua/lua/commit/1f3c6f4534c6411313361697d98d1145a1f030fa
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJNJ66IFDUKWJJZXHGOLRGIA3HWWC36R/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHYZOEFDVLVAD6EEP4CDW6DNONIVVHPA/
lua-users.org/lists/lua-l/2022-02/msg00001.html
lua-users.org/lists/lua-l/2022-02/msg00070.html
lua-users.org/lists/lua-l/2022-04/msg00009.html
security.gentoo.org/glsa/202305-23
Related
photon
photon
Critical Photon OS Security Update - PHSA-2022-0386
2022-04-22 00:00:00
Critical Photon OS Security Update - PHSA-2022-0173
2022-04-21 00:00:00
Critical Photon OS Security Update - PHSA-2022-3.0-0386
2022-04-22 00:00:00
ibm
ibm
nvd
nvd
CVE-2022-28805
2022-04-08 06:15:07
debiancve
debiancve
CVE-2022-28805
2022-04-08 06:15:07
nessus
nessus
Oracle Linux 9 : lua (ELSA-2023-2582)
2023-05-15 00:00:00
RHEL 9 : lua (RHSA-2023:2582)
2023-05-13 00:00:00
CBL Mariner 2.0 Security Update: lua (CVE-2022-28805)
2023-03-20 00:00:00
redhat
redhat
(RHSA-2023:2582) Low: lua security update
2023-05-09 05:15:07
(RHSA-2023:3905) Important: Network observability 1.3.0 for Openshift
2023-06-28 15:41:08
cbl_mariner
cbl_mariner
CVE-2022-28805 affecting package lua 5.3.5-8
2022-05-12 02:16:37
CVE-2022-28805 affecting package lua for versions less than 5.4.3-2
2022-06-03 17:54:02
CVE-2022-28805 affecting package lua for versions less than 5.4.4-2
2024-03-19 17:21:46
osv
osv
BIT-lua-2022-28805
2024-03-06 10:55:38
CVE-2022-28805
2022-04-08 06:15:07
Low: lua security update
2023-05-09 00:00:00
almalinux
almalinux
Low: lua security update
2023-05-09 00:00:00
cve
cve
CVE-2022-28805
2022-04-08 06:15:07
redhatcve
redhatcve
CVE-2022-28805
2022-04-11 05:14:48
ubuntucve
ubuntucve
CVE-2022-28805
2022-04-08 00:00:00
oraclelinux
oraclelinux
lua security update
2023-05-15 00:00:00
alpinelinux
alpinelinux
CVE-2022-28805
2022-04-08 06:15:07
prion
prion
Heap overflow
2022-04-08 06:15:00
veracode
veracode
Denial Of Service (DoS)
2022-05-02 12:21:44
openvas
openvas
Fedora: Security Advisory for lua (FEDORA-2022-b9ed35a7ad)
2022-07-27 00:00:00
Fedora: Security Advisory for lua (FEDORA-2022-5b5889f43a)
2022-08-05 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: lua-5.4.4-3.fc36
2022-07-26 16:15:00
[SECURITY] Fedora 35 Update: lua-5.4.4-3.fc35
2022-08-04 01:37:59
gentoo
gentoo
Lua: Multiple Vulnerabilities
2023-05-03 00:00:00