Lucene search
+L

119 matches found

osv_debian
osv_debian
•added 2021/11/09 1:15 p.m.•14 views

DEBIAN-CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

5.5CVSS6.2AI score0.01227EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2021/11/09 1:15 p.m.•20 views

UBUNTU-CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

5.5CVSS6.4AI score0.01227EPSS
SaveExploits1References5
Prion
Prion
•added 2021/11/09 1:15 p.m.•28 views

Stack overflow

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

4.3CVSS5.8AI score0.01227EPSS
SaveExploits1References4Affected Software2
UbuntuCve
UbuntuCve
•added 2021/11/09 1:15 p.m.•55 views

CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

5.5CVSS6.5AI score0.01227EPSS
SaveExploits1References4
Mend
Mend
•added 2021/11/09 12:26 p.m.•4 views

CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

6.8CVSS0.01227EPSS
SaveExploits1References9
CVE
CVE
•added 2021/11/09 12:26 p.m.•197 views

CVE-2021-43519

CVE-2021-43519: Lua stack overflow in lua_resume (ldo.c) of Lua 5.1.0–5.4.4 allows DoS via crafted script files. Connected findings show affected packages across distributions: MiracleLinux 9 (lua-5.4.4-2.el9), Linux distros with lua/memcached/ntopng packages, and Mariner/CBL Mariner advisories r...

5.5CVSS5.5AI score0.01227EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/09 12:00 a.m.•6 views

CVE-2021-43519: Uncontrolled Recursion

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

5.5CVSS5.8AI score0.01227EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/11/09 12:00 a.m.•17 views

Lua buffer error vulnerability

Lua is a lightweight, extensible open source scripting language from the Lua LUA team. A buffer error vulnerability exists in Lua Interpreter that stems from luaresume in the product ldo.c file failing to properly handle data files. An attacker could use this vulnerability to cause a denial of...

5.5CVSS6.4AI score0.01227EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
•added 2021/10/20 12:00 a.m.•13 views

Redis Lua Interpreter Code Execution

The vulnerability of Lua interpreter in the Redis database management system is related to the possibility of buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.2AI score0.16206EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/07/20 12:00 a.m.•14 views

Lua script interpreter ldebug.c numerical loss of significance DoS

The vulnerability of the ldebug.c component of the Lua script interpreter is related to a numerical loss of significance. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

5.3CVSS6.3AI score0.03833EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
•added 2020/12/15 12:00 a.m.•21 views

Cisco IOS XE Lua Interpreter Code Execution

The vulnerability of the Lua interpreter used in Cisco IOS XE operating systems is related to insufficient restrictions on function calls. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

5.2CVSS7.4AI score0.00386EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2020/10/02 12:00 a.m.•113 views

Cisco IOS XE Software Arbitrary Code Execution (cisco-sa-ios-lua-rce-7VeJX4f)

According to its self-reported version, Cisco IOS XE Software is affected by an arbitrary code execution vulnerability in its Lua interpreter due to insufficient permission checks on Lua function calls. An authenticated, local attacker can exploit this to bypass authentication and execute arbitra...

7.2CVSS8AI score0.00386EPSS
SaveExploits0References3
NVD
NVD
•added 2020/09/24 6:15 p.m.•38 views

CVE-2020-3423

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...

7.2CVSS0.00386EPSS
SaveExploits0References1
Prion
Prion
•added 2020/09/24 6:15 p.m.•36 views

Buffer overflow

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...

7.2CVSS6.8AI score0.00386EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2020/09/24 6:01 p.m.•30 views

CVE-2020-3423 Cisco IOS XE Software Arbitrary Code Execution Vulnerability

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...

5.1CVSS7.8AI score0.00386EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/09/24 6:01 p.m.•59 views

CVE-2020-3423 Cisco IOS XE Software Arbitrary Code Execution Vulnerability

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...

5.1CVSS6.8AI score0.00386EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/09/24 4:00 p.m.•65 views

Cisco IOS XE Software Arbitrary Code Execution Vulnerability

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...

5.1CVSS2.8AI score0.00386EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/24 12:00 a.m.•10 views

CVE-2020-3423: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...

7.2CVSS6.9AI score0.00386EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2020/09/23 1:15 a.m.•14 views

CVE-2019-15992

A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to execute arbitrary code with root privileges on the underlying Linux operating...

7.2CVSS6.1AI score
SaveExploits0References1
NVD
NVD
•added 2020/09/23 1:15 a.m.•49 views

CVE-2019-15992

A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to execute arbitrary code with root privileges on the underlying Linux operating...

9CVSS0.04122EPSS
SaveExploits0References1
Rows per page
Query Builder