Critical Photon OS Security Update - PHSA-2021-0130

Updates of 'lua', 'go', 'kafka' packages of Photon OS have been released...

PT-2022-12269

Name of the Vulnerable Software and Affected Versions Lua interpreter versions 5.4.0 through 5.4.3 Description The issue is related to a use after free in the garbage collector and finalizer of lgc.c in the Lua interpreter. This allows attackers to perform a Sandbox Escape via a crafted script...

Critical Photon OS Security Update - PHSA-2021-4.0-0130

Updates of 'librdkafka', 'lua', 'kafka', 'go' packages of Photon OS have been released...

SUSE SLES15 Security Update : redis (SUSE-SU-2021:3772-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3772-1 advisory. - Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can...

openSUSE 15 Security Update : redis (openSUSE-SU-2021:3772-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3772-1 advisory. - Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis...

Oracle Linux 8 : lua (ELSA-2021-4510)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4510 advisory. 5.3.4-12 - Fix segfault in getlocal and setlocal 1880445 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

GitLab: RCE via WikiCloth markdown rendering if the `rubyluabridge` gem is installed

Summary One of the supported wiki formats is mediawiki which is rendered by WikiCloth via GitLab Markup: https://gitlab.com/gitlab-org/gitlab-markup/-/blob/v1.7.1/lib/github/markups.rbL24-28 ruby markup:wikicloth, /mediawiki|wiki/ do |content| wikicloth = WikiCloth::WikiCloth.new:data = content...

lua security update

5.3.4-12 - Fix segfault in getlocal and setlocal 1880445...

OESA-2021-1432 redis6 security update

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. Security Fixes: Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts...

RHEL 8 : lua (RHSA-2021:4510)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4510 advisory. The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently us...

CentOS 8 : lua (CESA-2021:4510)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4510 advisory. - lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370 Note that Nessus has not tested for this issue but has instead relied on...

lua: segmentation fault in getlocal and setlocal functions in ldebug.c

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31...

Low: Red Hat Security Advisory: lua security update

An update for lua is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

DEBIAN-CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

AZL-41574 CVE-2021-43519 affecting package lua for versions less than 5.4.4-1

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

AZL-41261 CVE-2021-43519 affecting package ceph for versions less than 18.2.2-3

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

AZL-41445 CVE-2021-43519 affecting package ntopng for versions less than 5.2.1-5

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

AZL-6672 CVE-2021-43519 affecting package lua for versions less than 5.4.3-1

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...