3515 matches found
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
nginx-mitigate-log4shell Mitigate log4shell CVE-2021-44228 an...
OESA-2021-1452 redis5 security update
Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...
Critical Photon OS Security Update - PHSA-2021-0130
Updates of 'lua', 'go', 'kafka' packages of Photon OS have been released...
PT-2022-12269
Name of the Vulnerable Software and Affected Versions Lua interpreter versions 5.4.0 through 5.4.3 Description The issue is related to a use after free in the garbage collector and finalizer of lgc.c in the Lua interpreter. This allows attackers to perform a Sandbox Escape via a crafted script...
Critical Photon OS Security Update - PHSA-2021-4.0-0130
Updates of 'lua', 'go', 'librdkafka', 'kafka' packages of Photon OS have been released...
SUSE SLES15 Security Update : redis (SUSE-SU-2021:3772-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3772-1 advisory. - CVE-2021-32627: Fixed integer to heap buffer overflows with streams bsc1191305. - CVE-2021-32628: Fixed integer to heap buffer overflows...
openSUSE 15 Security Update : redis (openSUSE-SU-2021:3772-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3772-1 advisory. - Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis...
Oracle Linux 8 : lua (ELSA-2021-4510)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4510 advisory. 5.3.4-12 - Fix segfault in getlocal and setlocal 1880445 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
GitLab: RCE via WikiCloth markdown rendering if the `rubyluabridge` gem is installed
Summary One of the supported wiki formats is mediawiki which is rendered by WikiCloth via GitLab Markup: https://gitlab.com/gitlab-org/gitlab-markup/-/blob/v1.7.1/lib/github/markups.rbL24-28 ruby markup:wikicloth, /mediawiki|wiki/ do |content| wikicloth = WikiCloth::WikiCloth.new:data = content...
lua security update
5.3.4-12 - Fix segfault in getlocal and setlocal 1880445...
OESA-2021-1432 redis6 security update
Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. Security Fixes: Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts...
RHEL 8 : lua (RHSA-2021:4510)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4510 advisory. The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently us...
CentOS 8 : lua (CESA-2021:4510)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4510 advisory. - lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370 Note that Nessus has not tested for this issue but has instead relied on...
Low: Red Hat Security Advisory: lua security update
An update for lua is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...
lua: segmentation fault in getlocal and setlocal functions in ldebug.c
ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31...
CVE-2021-43519
Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...
AZL-41445 CVE-2021-43519 affecting package ntopng for versions less than 5.2.1-5
Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...
AZL-41574 CVE-2021-43519 affecting package lua for versions less than 5.4.4-1
Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...
AZL-41261 CVE-2021-43519 affecting package ceph for versions less than 18.2.2-3
Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...