Lucene search
K

3306 matches found

OSV
OSV
added 2021/11/09 1:15 p.m.3 views

AZL-41866 CVE-2021-43519 affecting package memcached for versions less than 1.6.27-2

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

5.5CVSS6.5AI score0.00174EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2021/11/09 1:15 p.m.32 views

CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

5.5CVSS6.5AI score0.00174EPSS
Exploits1References4
Prion
Prion
added 2021/11/09 1:15 p.m.18 views

Stack overflow

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

4.3CVSS5.8AI score0.00174EPSS
Exploits1References4Affected Software2
OSV
OSV
added 2021/11/09 1:15 p.m.1 views

UBUNTU-CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

5.5CVSS6.4AI score0.00174EPSS
Exploits1References5
Cvelist
Cvelist
added 2021/11/09 12:26 p.m.22 views

CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

6AI score0.00174EPSS
Exploits1References4
CVE
CVE
added 2021/11/09 12:26 p.m.138 views

CVE-2021-43519

CVE-2021-43519: Lua stack overflow in lua_resume (ldo.c) of Lua 5.1.0–5.4.4 allows DoS via crafted script files. Connected findings show affected packages across distributions: MiracleLinux 9 (lua-5.4.4-2.el9), Linux distros with lua/memcached/ntopng packages, and Mariner/CBL Mariner advisories r...

5.5CVSS5.5AI score0.00174EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/11/09 9:37 a.m.21 views

RLSA-2021:4510 Low: lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fixes: lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370...

5.3CVSS5.7AI score0.02019EPSS
Exploits1References2
AlmaLinux
AlmaLinux
added 2021/11/09 9:37 a.m.52 views

Low: lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fixes: lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370...

5.3CVSS6AI score0.02019EPSS
Exploits1References2
Rockylinux
Rockylinux
added 2021/11/09 9:37 a.m.28 views

lua security update

An update is available for lua. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The lua packages provide support for Lua, a powerful light-weight programming...

5.3CVSS7.6AI score0.02019EPSS
Exploits1
OSV
OSV
added 2021/11/09 9:37 a.m.32 views

ALSA-2021:4510 Low: lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fixes: lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370...

5.3CVSS5.8AI score0.02019EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/11/09 12:0 a.m.2 views

Lua 缓冲区错误漏洞

Lua is a lightweight, extensible open source scripting language from the Lua LUA team. A buffer error vulnerability exists in Lua Interpreter that stems from luaresume in the product ldo.c file failing to properly handle data files. An attacker could use this vulnerability to cause a denial of...

5.5CVSS6.4AI score0.00174EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2021/11/06 12:0 a.m.52 views

Debian DSA-5001-1 : redis - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5001 advisory. Multiple vulnerabilities were discovered in Redis, a persistent key-value database, which could result in denial of service or the execution of arbitrary cod...

9CVSS7AI score0.05836EPSS
Exploits0References22
OpenVAS
OpenVAS
added 2021/11/06 12:0 a.m.42 views

Debian: Security Advisory (DLA-2810-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9CVSS6.9AI score0.05836EPSS
Exploits0References3
OSV
OSV
added 2021/10/31 3:8 p.m.4 views

OPENSUSE-SU-2021:1424-1 Security update for civetweb

This update for civetweb fixes the following issues: Version 1.15: boo1191938 / CVE-2020-27304: missing uploaded filepath validation in the default form-based file upload mechanism New configuration for URL decoding Sanitize filenames in handle form Example “embeddedc.c”: Do not overwrite files...

9.8CVSS9.6AI score0.00995EPSS
Exploits1References3
Fedora
Fedora
added 2021/10/29 11:18 p.m.167 views

[SECURITY] Fedora 35 Update: redis-6.2.6-1.fc35

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

9CVSS0.7AI score0.05836EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/10/28 12:0 a.m.66 views

CentOS 8 : redis:5 (CESA-2021:3918)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3918 advisory. - redis: Lua scripts can overflow the heap-based Lua stack CVE-2021-32626 - redis: Integer overflow issue with Streams CVE-2021-32627 - redis: Integer...

8.8CVSS6.5AI score0.05836EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2021/10/26 12:0 a.m.32 views

RHEL 7 : Red Hat OpenStack Platform 13.0 (redis) (RHSA-2021:3980)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3980 advisory. Redis is an advanced key-value store. Security Fixes: Lua scripts can overflow the heap-based Lua stack CVE-2021-32626 Integer overflow issu...

8.8CVSS6.7AI score0.05836EPSS
Exploits0References14
Tenable Nessus
Tenable Nessus
added 2021/10/26 12:0 a.m.40 views

RHEL 7 : Red Hat OpenStack Platform 10.0 (redis) (RHSA-2021:3971)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3971 advisory. Redis is an advanced key-value store. Security Fixes: Lua scripts can overflow the heap-based Lua stack CVE-2021-32626 Integer overflow issu...

8.8CVSS6.7AI score0.05836EPSS
Exploits0References14
RedHat Linux
RedHat Linux
added 2021/10/25 5:58 p.m.44 views

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (redis) security update

An update for redis is now available for Red Hat OpenStack Platform 13 Queens. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

8.8CVSS6.7AI score0.05836EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2021/10/25 5:58 p.m.0 views

redis: Lua scripts can overflow the heap-based Lua stack

A heap buffer overflow was found in redis. Specially crafted Lua scripts executing in Redis cause the heap-based Lua stack to overflow due to incomplete checks for this condition. This flaw allows a remote attacker to corrupt the heap and potentially trigger remote code execution. The highest...

8.8CVSS7.7AI score0.0246EPSS
Exploits0References5
Rows per page
Query Builder