Ubuntu: Security Advisory (USN-3941-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2019:0175-1 Security update for lua53

This update for lua53 fixes the following issues: Security issue fixed: - CVE-2019-6706: Fixed a use-after-free bug in the luaupvaluejoin function of lapi.c bsc1123043 This update was imported from the SUSE:SLE-15:Update update project...

openSUSE Security Update : lua53 (openSUSE-2019-175)

This update for lua53 fixes the following issues : Security issue fixed : - CVE-2019-6706: Fixed a use-after-free bug in the luaupvaluejoin function of lapi.c bsc1123043 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE: Security Advisory for lua53 (openSUSE-SU-2019:0175-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for lua53 (moderate)

openSUSE Security Update: Security update for lua53 Announcement ID: openSUSE-SU-2019:0175-1 Rating: moderate References: 1123043 Cross-References: CVE-2019-6706 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for lua53 fixes...

SUSE-SU-2019:0247-1 Security update for lua53

This update for lua53 fixes the following issues: Security issue fixed: - CVE-2019-6706: Fixed a use-after-free bug in the luaupvaluejoin function of lapi.c bsc1123043...

SUSE SLED15 / SLES15 Security Update : lua53 (SUSE-SU-2019:0247-1)

This update for lua53 fixes the following issues : Security issue fixed : CVE-2019-6706: Fixed a use-after-free bug in the luaupvaluejoin function of lapi.c bsc1123043 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

Fedora 29 : lua (2019-ee57bda7ae)

Security fix for CVE-2019-6706. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

CVE-2019-6706

Lua 5.3.5 has a use-after-free in luaupvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships...

Lua 5.3.5 - debug.upvaluejoin Use After Free

Lua 5.3.5 - debug.upvaluejoin Use After Free Exploit Title: Lua 5.3.5 Exploit Author: Fady Mohamed Osman https://twitter.com/fadyothman Exploit-db : http://www.exploit-db.com/author/?a=2986 Blog : https://blog.fadyothman.com/ Date: Jan. 10th 2019 Vendor Homepage: https://www.lua.org/ Software Lin...

Lua 5.3.5 Use-After-Free

Exploit Title: Lua 5.3.5 Exploit Author: Fady Mohamed Osman https://twitter.com/fadyothman Exploit-db : http://www.exploit-db.com/author/?a=2986 Blog : https://blog.fadyothman.com/ Date: Jan. 10th 2019 Vendor Homepage: https://www.lua.org/ Software Link: https://www.lua.org/ftp/lua-5.3.5.tar.gz...

Lua 5.3.5 - debug.upvaluejoin Use After Free Exploit

Exploit Title: Lua 5.3.5 Exploit Author: Fady Mohamed Osman https://twitter.com/fadyothman Exploit-db : http://www.exploit-db.com/author/?a=2986 Blog : https://blog.fadyothman.com/ Date: Jan. 10th 2019 Vendor Homepage: https://www.lua.org/ Software Link: https://www.lua.org/ftp/lua-5.3.5.tar.gz...

Lua 5.3.5 - 'debug.upvaluejoin' Use After Free

Exploit Title: Lua 5.3.5 Exploit Author: Fady Mohamed Osman https://twitter.com/fadyothman Exploit-db : http://www.exploit-db.com/author/?a=2986 Blog : https://blog.fadyothman.com/ Date: Jan. 10th 2019 Vendor Homepage: https://www.lua.org/ Software Link: https://www.lua.org/ftp/lua-5.3.5.tar.gz...

CVE-2019-6706

Lua 5.3.5 has a use-after-free in luaupvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships...

CVE-2019-6706

CVE-2019-6706 affects Lua 5.3.5, describing a heap-use-after-free in lua_upvaluejoin (lapi.c). Public references show vulnerability can crash a target when debug.upvaluejoin is invoked with specific argument relationships, potentially enabling a denial-of-service. Several connected sources corrob...

CVE-2019-6706

Lua 5.3.5 has a use-after-free in luaupvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships...

CVE-2019-6706

Lua 5.3.5 has a use-after-free in luaupvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships...

CVE-2018-6706

CVE-2018-6706 affects McAfee Agent (non-Windows) on Linux, with insecure handling of temporary files during installation. Affected versions are 5.0.0–5.0.6 and 5.5.0–5.5.1. The vulnerability permits an unprivileged user to introduce custom paths during agent installation via unspecified vectors, ...

Microsoft Windows Defender - mpengine.dll Memory Corruption Exploit

Exploit for windows platform in category dos / poc Windows Defender inspects a variety of different archive formats, among others RAR. Inspection of mpengine.dll revealed that the code responsible for processing RAR archives appears to be a forked and modified version of the original unrar code;...

Microsoft Windows Defender - 'mpengine.dll' Memory Corruption

Windows Defender inspects a variety of different archive formats, among others RAR. Inspection of mpengine.dll revealed that the code responsible for processing RAR archives appears to be a forked and modified version of the original unrar code; given that it still processes the VMSFUPCASE filter...