Astra Linux - уязвимость в lua5.3

The vulnerability of the lmathlib.c component of the Lua script interpreter is related to a lack of data type conversion mechanisms. Exploiting this vulnerability allows an attacker to cause service failures...

SUSE CVE-2021-32918

An issue was discovered in Prosody before 0.11.9. Default settings are susceptible to remote unauthenticated denial-of-service DoS attacks via memory exhaustion when running under Lua 5.2 or Lua 5.3...

USN-3941-1 lua5.3 vulnerability

Fady Othman discovered that Lua incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service...

PT-2019-5458

Name of the Vulnerable Software and Affected Versions Lua version 5.3.5 Description The issue is related to a use-after-free in the lua upvaluejoin function in lapi.c, which can be exploited by an attacker to cause a crash. This can be achieved by triggering a debug.upvaluejoin call with specific...