CVE-2022-35978-POC

CVE-2022-35978 POC 설명 CVE-2022-35978는 Minetest 버전 5.5.1 이하에 영향을 미치는 치명적인 보안 취약점입니다. Minetest는 무료 오픈소스 복셀 게임 엔진으로, 쉬운 모딩과 게임 제작을 지원합니다. 싱글 플레이어 모드에서 모드는 메인 메뉴를 표시하기 위해 로드되는 Lua 스크립트를 제어하는 전역 설정을 지정할 수 있습니다. 이 스크립트는 게임 세션을 종료하는 즉시 로드됩니다. 메뉴가 실행되는 Lua 환경은 샌드박싱되지 않아 사용자의 시스템에 직접 간섭할 수 있습니다. 이 문제를 완화하...

CVE-2026-41196: Improper Control of Generation of Code

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

MGASA-2023-0005 Updated minetest packages fix security vulnerability

This update provides minetest 5.6.1, the latest stable release of the open source voxel game. This updates provides a number of feature and bug fix changes compared to the previous version 5.4.0 provided in Mageia 8. See the linked release notes and changelogs for details. The update also improve...

DEBIAN-CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

UBUNTU-CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

PT-2022-23076 · Minetest +2 · Minetest +2

Name of the Vulnerable Software and Affected Versions: Minetest versions prior to 5.6.1 Description: The issue concerns a security vulnerability in Minetest, a free open-source voxel game engine, where a mod in single-player mode can set a global setting to control the Lua script loaded for the...

UBUNTU-CVE-2022-24735

Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior to version 7.0.0 or 6.2.7 can inject Lua code that will execute with the potentially higher privileges of another Redis user. The Lua scri...