25 matches found
AZL-60034 CVE-2021-44964 affecting package ntopng for versions less than 5.2.1-3
Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...
6.3CVSS6.8AI score0.00985EPSS
SaveExploits1References1
CVE-2021-44964
Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...
6.3CVSS7.3AI score
SaveExploits0References5
CVE-2021-44964
CVE-2021-44964 affects Lua interpreter 5.4.0–5.4.3, where use-after-free in the garbage collector/finalizer (lgc.c) enables Sandbox Escape via a crafted script file. Multiple connected advisories confirm the issue and note that patched versions exist (e.g., Lua 5.4.4+; e.g., 5.4.4-1 or newer) and...
6.3CVSS6.5AI score0.00985EPSS
SaveExploits1References5Affected Software1
20