Lucene search

K
osvGoogleOSV:RLSA-2023:0957
HistoryApr 06, 2023 - 3:53 p.m.

Moderate: lua security update

2023-04-0615:53:31
Google
osv.dev
3

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.2%

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

  • lua: use after free allows Sandbox Escape (CVE-2021-44964)

  • lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.