Remote Code Execution (RCE)

luajit is vulnerable to remote code execution. The vulnerability exists due to a type confusion in debug.getinfo...

LuaJIT Type Obfuscation Vulnerability

LuaJIT is an on-the-fly compiler for the Lua language. A type-obfuscation vulnerability in debug.getinfo in LuaJIT 2.0.5 and earlier used in Moonjit 2.1.2 and earlier and other products can be exploited by an attacker to read or write to arbitrary memory...

AZL-41306 CVE-2019-19391 affecting package sysbench for versions less than 1.0.20-3

In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and options are mishandled. NOTE: The LuaJIT project owner states that...

Type confusion

DISPUTED In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and options are mishandled. NOTE: The LuaJIT project owner...

CVE-2019-19391

In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and options are mishandled. NOTE: The LuaJIT project owner states that...

PT-2019-15837 · Luajit +3 · Luajit +3

Name of the Vulnerable Software and Affected Versions: LuaJIT versions 2.0.5 and earlier Moonjit versions prior to 2.1.2 Description: The issue involves a type confusion problem in the debug.getinfo function, which can lead to arbitrary memory write or read operations due to mishandling of certai...