Lucene search
+L

4106 matches found

osv_azl
osv_azl
•added 2022/01/11 1:15 p.m.•21 views

AZL-41797 CVE-2021-44647 affecting package ntopng for versions less than 5.2.1-5

Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...

5.5CVSS6.4AI score0.00418EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/01/11 1:15 p.m.•17 views

CVE-2021-44647

Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...

5.5CVSS6.4AI score0.00418EPSS
SaveExploits1References7
osv_azl
osv_azl
•added 2022/01/11 1:15 p.m.•20 views

AZL-9317 CVE-2021-44647 affecting package lua for versions less than 5.4.3-3

Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...

5.5CVSS6.4AI score0.00418EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/01/11 1:15 p.m.•17 views

UBUNTU-CVE-2021-44647

Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...

5.5CVSS6.8AI score0.00418EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2022/01/11 1:15 p.m.•55 views

CVE-2021-44647

Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...

5.5CVSS6.7AI score0.00418EPSS
SaveExploits1References3
Prion
Prion
•added 2022/01/11 1:15 p.m.•38 views

Type confusion

Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...

2.1CVSS5.3AI score0.00418EPSS
SaveExploits1References5Affected Software2
Positive Technologies
Positive Technologies
•added 2022/01/11 12:00 a.m.•12 views

PT-2022-12190

Name of the Vulnerable Software and Affected Versions Lua versions 5.4.2 through 5.4.4 Description The issue is related to a type confusion in the funcnamefromcode function in ldebug.c, which can cause a local denial of service due to a SEGV. Recommendations For Lua versions 5.4.2 through 5.4.4,...

5.5CVSS6.2AI score0.00418EPSS
SaveExploits1References32
Debian CVE
Debian CVE
•added 2022/01/11 12:00 a.m.•44 views

CVE-2021-44647

Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...

5.5CVSS5.7AI score0.00418EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/11 12:00 a.m.•7 views

CVE-2021-44647: Access of Resource Using Incompatible Type

Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...

5.5CVSS5.8AI score0.00418EPSS
SaveExploits1References2
Mend
Mend
•added 2022/01/11 12:00 a.m.•6 views

CVE-2021-44647

Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...

6.8CVSS0.00418EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2022/01/11 12:00 a.m.•39 views

CVE-2021-44647

Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...

5.8AI score0.00418EPSS
SaveExploits1References5
CVE
CVE
•added 2022/01/11 12:00 a.m.•173 views

CVE-2021-44647

CVE-2021-44647 affects Lua v5.4.3 and above. The vulnerability is a SEGV caused by a type confusion in funcnamefromcode within ldebug.c, leading to local denial of service. The provided materials identify Lua as the affected component and describe the local attack potential and lack of cross‑site...

5.5CVSS5.4AI score0.00418EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2022/01/11 12:00 a.m.•17 views

Lua安全漏洞

Lua is a lightweight, extensible open source scripting language from the Lua LUA team. Lua 5.4.4 and 5.4.2 have a security vulnerability that stems from a type obfuscation vulnerability in the funcnamefromcode function in lldebug.c, which can be exploited by an attacker to cause a local denial of...

5.5CVSS5.6AI score0.00418EPSS
SaveExploits1References7
osv_usn
osv_usn
•added 2022/01/10 11:14 a.m.•23 views

USN-5212-2 apache2 vulnerabilities

USN-5212-1 fixed several vulnerabilities in Apache. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that the Apache HTTP Server incorrectly handled certain forward proxy requests. A remote attacker could use thi...

9.8CVSS8AI score0.9684EPSS
SaveExploits6References3
Ubuntu
Ubuntu
•added 2022/01/10 11:14 a.m.•209 views

USN-5212-2: Apache HTTP Server vulnerabilities

USN-5212-1 fixed several vulnerabilities in Apache. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that the Apache HTTP Server incorrectly handled certain forward proxy requests. A remote attacker could use thi...

9.8CVSS8AI score0.9684EPSS
SaveExploits6
osv_usn
osv_usn
•added 2022/01/06 2:48 p.m.•20 views

USN-5212-1 apache2 vulnerabilities

It was discovered that the Apache HTTP Server incorrectly handled certain forward proxy requests. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service, or possibly perform a Server Side Request Forgery attack. CVE-2021-44224 It was discovered that...

9.8CVSS8AI score0.9684EPSS
SaveExploits6References3
osv_oesa
osv_oesa
•added 2021/12/25 11:04 a.m.•18 views

OESA-2021-1473 httpd security update

Apache HTTP Server. Security Fixes: A crafted URI sent to httpd configured as a forward proxy ProxyRequests on can cause a crash NULL pointer dereference or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket...

9.8CVSS7.5AI score0.9684EPSS
SaveExploits6References3
RedhatCVE
RedhatCVE
•added 2021/12/21 5:04 p.m.•294 views

CVE-2021-44790

A buffer overflow flaw in httpd's lua module could allow an out-of-bounds write. An attacker who is able to submit a crafted request to an httpd instance that is using the lua module may be able to cause an impact to confidentiality, integrity, and/or availability. Mitigation Disabling modlua and...

9.8CVSS8.2AI score0.9684EPSS
SaveExploits6References4
osv_azl
osv_azl
•added 2021/12/20 12:15 p.m.•20 views

AZL-7044 CVE-2021-44790 affecting package httpd for versions less than 2.4.52-1

A carefully crafted request body can cause a buffer overflow in the modlua multipart parser r:parsebody called from Lua scripts. The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier...

9.8CVSS8.1AI score0.9684EPSS
SaveExploits6References1
osv_ubuntu
osv_ubuntu
•added 2021/12/20 12:15 p.m.•13 views

UBUNTU-CVE-2021-44790

A carefully crafted request body can cause a buffer overflow in the modlua multipart parser r:parsebody called from Lua scripts. The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier...

9.8CVSS8.1AI score0.9684EPSS
SaveExploits6References5
Rows per page
Query Builder