CVE-2022-35978-POC

CVE-2022-35978 POC 説明 CVE-2022-35978 は、Minetest バージョン 5.5.1 以前に影響を与える重大なセキュリティ脆弱性です。 Minetest は、簡単な MOD 作成やゲーム制作をサポートする無料のオープンソース ボクセルゲームエンジンです。シングルプレイヤーモードでは、MOD がメインメニューを表示するためにロードされる Lua スクリプトを制御するグローバル設定を設定できます。このスクリプトは、ゲームセッションが終了するとすぐにロードされます。メニューが実行される Lua...

MGASA-2023-0005 Updated minetest packages fix security vulnerability

This update provides minetest 5.6.1, the latest stable release of the open source voxel game. This updates provides a number of feature and bug fix changes compared to the previous version 5.4.0 provided in Mageia 8. See the linked release notes and changelogs for details. The update also improve...

DEBIAN-CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

UBUNTU-CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

PT-2022-23076 · Minetest +2 · Minetest +2

Name of the Vulnerable Software and Affected Versions: Minetest versions prior to 5.6.1 Description: The issue concerns a security vulnerability in Minetest, a free open-source voxel game engine, where a mod in single-player mode can set a global setting to control the Lua script loaded for the...

UBUNTU-CVE-2022-24735

Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior to version 7.0.0 or 6.2.7 can inject Lua code that will execute with the potentially higher privileges of another Redis user. The Lua scri...