lua:fuzz_lua: Heap-buffer-overflow in luaG_getfuncline

Project: https://github.com/lua/lua.git Detailed Report: https://oss-fuzz.com/testcase?key=5823823048998912 Project: lua Fuzzing Engine: afl Fuzz Target: fuzzlua Job Type: aflasanlua Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6030001daaa5 Crash State:...

OESA-2021-1057 luajit security update

LuaJIT is a Just-In-Time Compiler JIT for the Lua programming language. Lua is a powerful, dynamic and light-weight programming language. It may be embedded or used as a general-purpose, stand-alone language. Security Fixes: LuaJIT through 2.1.0-beta3 has an out-of-bounds read in ljerrrun in...

Huawei EulerOS: Security Advisory for lua (EulerOS-SA-2021-1545)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : lua (EulerOS-SA-2021-1545)

According to the version of the lua packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by...

lua:fuzz_lua: Heap-buffer-overflow in luaG_runerror

Project: https://github.com/lua/lua.git Detailed Report: https://oss-fuzz.com/testcase?key=4832107483496448 Project: lua Fuzzing Engine: libFuzzer Fuzz Target: fuzzlua Job Type: libfuzzerasanlua Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x604000001a77 Crash State:...

Fedora: Security Advisory for prosody (FEDORA-2021-a639ec5d6e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-28119

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash occurred, as reported by OSS-Fuzz. The crash state includes functions such as luaG runerror, luaD pretailcall, and luaV...

Fedora: Security Advisory for prosody (FEDORA-2021-54d3af6388)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 32 Update: prosody-0.11.8-1.fc32

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

[SECURITY] Fedora 33 Update: prosody-0.11.8-1.fc33

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

lua:fuzz_lua: Heap-buffer-overflow in luaG_runerror

Project: https://github.com/lua/lua.git Detailed Report: https://oss-fuzz.com/testcase?key=6568794421067776 Project: lua Fuzzing Engine: afl Fuzz Target: fuzzlua Job Type: aflasanlua Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6030000042e7 Crash State: luaGrunerror...

NoSQL Redis Heap Buffer Overflow DoS

The vulnerability of the getnum function implementation in the NoSQL Redis database management system arises from a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code using the scripting language Lua...

Huawei EulerOS: Security Advisory for lua (EulerOS-SA-2021-1154)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : lua (EulerOS-SA-2021-1154)

According to the version of the lua packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31.CVE-2020-24370 Not...

CentOS 8 : lua (CESA-2019:3706)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3706 advisory. - lua: use-after-free in luaupvaluejoin in lapi.c resulting in denial of service CVE-2019-6706 Note that Nessus has not tested for this issue but has instead...

lua:fuzz_lua: Heap-buffer-overflow in luaH_newkey

Detailed Report: https://oss-fuzz.com/testcase?key=5648938650697728 Project: lua Fuzzing Engine: libFuzzer Fuzz Target: fuzzlua Job Type: libfuzzerasanlua Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6170000010b8 Crash State: luaHnewkey luaVfinishset luaVexecute...

OSV-2021-205 Heap-use-after-free in lua_closeslot

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29610 Crash type: Heap-use-after-free WRITE 1 Crash state: luacloseslot luaLtraceback msghandler...

PT-2021-28008

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

lua:fuzz_lua: Heap-use-after-free in lua_closeslot

Project: https://github.com/lua/lua.git Detailed Report: https://oss-fuzz.com/testcase?key=6225249693728768 Project: lua Fuzzing Engine: libFuzzer Fuzz Target: fuzzlua Job Type: libfuzzerasanlua Platform Id: linux Crash Type: Heap-use-after-free WRITE 1 Crash Address: 0x61800000ba38 Crash State:...

Medium: vim

Issue Overview: A flaw was found in vim in the restricted mode, where all commands that make use of external shells are disabled. However, it was found that users could still execute some arbitrary OS commands in the restricted mode. This flaw was fixed by filtering the functions that can call OS...