Lucene search
K

50 matches found

OSV
OSV
added 2026/05/26 7:45 p.m.8 views

JLSEC-2026-558

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...

6.3CVSS5.8AI score0.01027EPSS
Exploits1References10
OSV
OSV
added 2026/05/26 7:45 p.m.8 views

JLSEC-2026-559

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.2AI score0.01418EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.9 views

PT-2026-47116

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...

5.5AI score
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.7 views

PT-2026-47117

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

5.7AI score
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-1825

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00497EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 8:53 p.m.2 views

CVE-2021-37692

TensorFlow is an end-to-end open source platform for machine learning. In affected versions under certain conditions, Go code can trigger a segfault in string deallocation. For string tensors, C.TFTStringDealloc is called during garbage collection within a finalizer function. However, tensor...

5.5CVSS6AI score0.00172EPSS
Exploits0References1
Snyk
Snyk
added 2025/03/20 5:45 p.m.2 views

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition during the namespace deletion process in deleteAllContent in namespacedresourcesdeleter.go. An attacker can bypass network restrictions because network policies are deleted before the pods they are meant to protect. All...

3.1CVSS6.9AI score0.0028EPSS
Exploits0References2
OSV
OSV
added 2024/03/06 10:55 a.m.15 views

BIT-LUA-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.5AI score0.01418EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2023/09/11 12:0 a.m.15 views

Huawei EulerOS: Security Advisory for lua (EulerOS-SA-2023-2763)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01418EPSS
Exploits1References2
Veracode
Veracode
added 2023/04/28 5:49 p.m.15 views

Denial Of Services (DoS)

lua5.4 is vulnerable to Denial Of Services DoS. The vulnerability exists because the erroneous finalizer call during a tail call leads to a heap-based buffer over-read, allowing an attacker to cause an application crash...

7.5CVSS6.8AI score0.01418EPSS
Exploits1References4Affected Software1
SUSE CVE
SUSE CVE
added 2023/04/11 1:55 a.m.3 views

SUSE CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS9.3AI score0.01418EPSS
Exploits1References3
OSV
OSV
added 2023/04/10 9:15 a.m.20 views

CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.8AI score
Exploits0References3
OSV
OSV
added 2023/04/10 9:15 a.m.2 views

DEBIAN-CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.5AI score0.01418EPSS
Exploits1References1
OSV
OSV
added 2023/04/10 9:15 a.m.6 views

AZL-26158 CVE-2021-45985 affecting package ntopng for versions less than 5.2.1-2

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.2AI score0.01418EPSS
Exploits1References1
OSV
OSV
added 2023/04/10 9:15 a.m.4 views

AZL-26047 CVE-2021-45985 affecting package lua for versions less than 5.4.3-5

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.2AI score0.01418EPSS
Exploits1References1
NVD
NVD
added 2023/04/10 9:15 a.m.13 views

CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.6AI score0.01418EPSS
Exploits1References3
Prion
Prion
added 2023/04/10 9:15 a.m.19 views

Heap overflow

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

5CVSS7.5AI score0.01418EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2023/04/10 9:15 a.m.1 views

UBUNTU-CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.4AI score0.01418EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2023/04/10 12:0 a.m.10 views

CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5AI score0.01418EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/04/10 12:0 a.m.16 views

CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.8AI score0.01418EPSS
Exploits1References3
Rows per page
Query Builder