CVE-2024-39840-POC

adapted from writeup: https://memorycorruption.net/posts/rce-lua-factorio/ works on factorio 1.1.86...

EUVD-2017-3227

Malware in sbrugna...

CVE-2024-39840

Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects...

CVE-2024-39840

Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects...

CVE-2024-39840

Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects...

Factorio Security Breach

Factorio is a suite of adventure sandbox games from Factorio. A security vulnerability exists in versions of Factorio prior to 1.1.101 that stems from allowing a carefully crafted server to execute arbitrary code on the client via a custom mapping...

CVE-2024-39840

Versions of Factorio prior to 1.1.101 are vulnerable to an arbitrary code execution flaw. A crafted server can execute code on clients by providing a custom map that leverages specific Lua base module functions to execute bytecode and generate fake objects . To remediate this, users should update...

PT-2024-28696 · Factorio · Factorio

Name of the Vulnerable Software and Affected Versions: Factorio versions prior to 1.1.101 Description: The issue allows a crafted server to execute arbitrary code on clients via a custom map. This is achieved by leveraging the ability of certain Lua base module functions to execute bytecode and...

CVE-2024-39840: Out-of-bounds Write

Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects...

CVE-2024-39840

Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects...

Wube Factorio Security Bypass Vulnerability

Wube Factorio Alien Factory is a factory construction game from Wube Software, Czech Republic. A security vulnerability exists in the Lua interface in versions of Wube Factorio prior to 0.15.31. A remote attacker can exploit this vulnerability by including and loading C libraries to bypass the...

Code injection

A sandbox escape in the Lua interface in Wube Factorio before 0.15.31 allows remote game servers or user-assisted attackers to execute arbitrary C code by including and loading a C library...

CVE-2017-11615

A sandbox escape in the Lua interface in Wube Factorio before 0.15.31 allows remote game servers or user-assisted attackers to execute arbitrary C code by including and loading a C library...

CVE-2017-11615

A sandbox escape in the Lua interface in Wube Factorio before 0.15.31 allows remote game servers or user-assisted attackers to execute arbitrary C code by including and loading a C library...

CVE-2017-11615

A vulnerability in Wube Factorio (Lua interface) prior to 0.15.31 allows a sandbox escape that enables a remote attacker to execute arbitrary C code by including and loading a C library. The underlying issue is a bypass of the sandbox within the Lua environment. Impact stated includes potential r...

CVE-2017-11615

A sandbox escape in the Lua interface in Wube Factorio before 0.15.31 allows remote game servers or user-assisted attackers to execute arbitrary C code by including and loading a C library...

CVE-2017-11615: Undefined Security Weakness

A sandbox escape in the Lua interface in Wube Factorio before 0.15.31 allows remote game servers or user-assisted attackers to execute arbitrary C code by including and loading a C library...