3306 matches found
AZL-41866 CVE-2021-43519 affecting package memcached for versions less than 1.6.27-2
Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...
CVE-2021-43519
Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...
Stack overflow
Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...
UBUNTU-CVE-2021-43519
Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...
CVE-2021-43519
Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...
CVE-2021-43519
CVE-2021-43519: Lua stack overflow in lua_resume (ldo.c) of Lua 5.1.0–5.4.4 allows DoS via crafted script files. Connected findings show affected packages across distributions: MiracleLinux 9 (lua-5.4.4-2.el9), Linux distros with lua/memcached/ntopng packages, and Mariner/CBL Mariner advisories r...
RLSA-2021:4510 Low: lua security update
The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fixes: lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370...
Low: lua security update
The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fixes: lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370...
lua security update
An update is available for lua. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The lua packages provide support for Lua, a powerful light-weight programming...
ALSA-2021:4510 Low: lua security update
The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fixes: lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370...
Lua 缓冲区错误漏洞
Lua is a lightweight, extensible open source scripting language from the Lua LUA team. A buffer error vulnerability exists in Lua Interpreter that stems from luaresume in the product ldo.c file failing to properly handle data files. An attacker could use this vulnerability to cause a denial of...
Debian DSA-5001-1 : redis - security update
The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5001 advisory. Multiple vulnerabilities were discovered in Redis, a persistent key-value database, which could result in denial of service or the execution of arbitrary cod...
Debian: Security Advisory (DLA-2810-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2021:1424-1 Security update for civetweb
This update for civetweb fixes the following issues: Version 1.15: boo1191938 / CVE-2020-27304: missing uploaded filepath validation in the default form-based file upload mechanism New configuration for URL decoding Sanitize filenames in handle form Example “embeddedc.c”: Do not overwrite files...
[SECURITY] Fedora 35 Update: redis-6.2.6-1.fc35
Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...
CentOS 8 : redis:5 (CESA-2021:3918)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3918 advisory. - redis: Lua scripts can overflow the heap-based Lua stack CVE-2021-32626 - redis: Integer overflow issue with Streams CVE-2021-32627 - redis: Integer...
RHEL 7 : Red Hat OpenStack Platform 13.0 (redis) (RHSA-2021:3980)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3980 advisory. Redis is an advanced key-value store. Security Fixes: Lua scripts can overflow the heap-based Lua stack CVE-2021-32626 Integer overflow issu...
RHEL 7 : Red Hat OpenStack Platform 10.0 (redis) (RHSA-2021:3971)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3971 advisory. Redis is an advanced key-value store. Security Fixes: Lua scripts can overflow the heap-based Lua stack CVE-2021-32626 Integer overflow issu...
Important: Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (redis) security update
An update for redis is now available for Red Hat OpenStack Platform 13 Queens. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
redis: Lua scripts can overflow the heap-based Lua stack
A heap buffer overflow was found in redis. Specially crafted Lua scripts executing in Redis cause the heap-based Lua stack to overflow due to incomplete checks for this condition. This flaw allows a remote attacker to corrupt the heap and potentially trigger remote code execution. The highest...