CVE-2021-44964

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...

CVE-2021-44964

CVE-2021-44964 affects Lua interpreter 5.4.0–5.4.3, where use-after-free in the garbage collector/finalizer (lgc.c) enables Sandbox Escape via a crafted script file. Multiple connected advisories confirm the issue and note that patched versions exist (e.g., Lua 5.4.4+; e.g., 5.4.4-1 or newer) and...

Denial Of Service (DoS)

lua is vulnerable to denial of service. The vulnerability exists due to Stack overflow in luaresume of ldo.c in Lua Interpreter...

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

...

AZL-41445 CVE-2021-43519 affecting package ntopng for versions less than 5.2.1-5

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

AZL-41261 CVE-2021-43519 affecting package ceph for versions less than 18.2.2-3

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

DEBIAN-CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

AZL-6672 CVE-2021-43519 affecting package lua for versions less than 5.4.3-1

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

Stack overflow

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

UBUNTU-CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

CVE-2021-43519

CVE-2021-43519: Lua stack overflow in lua_resume (ldo.c) of Lua 5.1.0–5.4.4 allows DoS via crafted script files. Connected findings show affected packages across distributions: MiracleLinux 9 (lua-5.4.4-2.el9), Linux distros with lua/memcached/ntopng packages, and Mariner/CBL Mariner advisories r...

Lua 缓冲区错误漏洞

Lua is a lightweight, extensible open source scripting language from the Lua LUA team. A buffer error vulnerability exists in Lua Interpreter that stems from luaresume in the product ldo.c file failing to properly handle data files. An attacker could use this vulnerability to cause a denial of...

The vulnerability of Lua interpreter in the Redis database management system allows attackers to execute arbitrary code.

The vulnerability of Lua interpreter in the Redis database management system is related to the possibility of buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ldebug.c component of the Lua script interpreter, related to a numerical loss of significance, allows an attacker to trigger a service failure.

The vulnerability of the ldebug.c component of the Lua script interpreter is related to a numerical loss of significance. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The vulnerability of the Lua interpreter used in Cisco IOS XE operating systems allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the Lua interpreter used in Cisco IOS XE operating systems is related to insufficient restrictions on function calls. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

Cisco IOS XE Software Arbitrary Code Execution (cisco-sa-ios-lua-rce-7VeJX4f)

According to its self-reported version, Cisco IOS XE Software is affected by an arbitrary code execution vulnerability in its Lua interpreter due to insufficient permission checks on Lua function calls. An authenticated, local attacker can exploit this to bypass authentication and execute arbitra...

CVE-2020-3423

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...

Buffer overflow

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...