Lua Buffer Overflow Vulnerability

Lua is a lightweight, extensible open source scripting language from the Lua team. A buffer overflow vulnerability exists in luaOpushvfstring in Lua 5.4.0 and earlier versions, which originates when a networked system or product performs an operation in memory without properly validating the data...

CVE-2020-24370

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31...

PT-2020-15713

Name of the Vulnerable Software and Affected Versions Lua version 5.4.0 Description The issue is related to the interaction between barriers and the sweep phase in the lgc.c component of Lua, leading to a memory access violation involving collectgarbage. Recommendations For Lua version 5.4.0, at...

PT-2020-15712

Name of the Vulnerable Software and Affected Versions Lua version 5.4.0 Description The issue arises in the ldebug.c file of Lua 5.4.0, where it attempts to access debug information via the line hook of a stripped function. This results in a NULL pointer dereference. Recommendations For Lua versi...

CVE-2020-24370

CVE-2020-24370 affects Lua via a negation overflow in ldebug.c, enabling a segmentation fault in getlocal and setlocal. Connected sources confirm this impacts Lua 5.4.0 and publicly documented mitigations include Lua 5.3 and Lua 5.4.x patches; advisories from Debian (DLA-2381-1 and DLA-3469-1) an...

CVE-2020-24371: Release of Invalid Pointer or Reference

lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage...

CVE-2020-24370

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31...

CVE-2020-24370: Integer Underflow (Wrap or Wraparound)

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31...

CVE-2020-24369: NULL Pointer Dereference

ldebug.c in Lua 5.4.0 attempts to access debug information via the line hook of a stripped function, leading to a NULL pointer dereference...

CVE-2020-24342

Lua through 5.4.0 allows a stack redzone cross in luaOpushvfstring because a protection mechanism wrongly calls luaDcallnoyield twice in a row...

DEBIAN-CVE-2020-24342

Lua through 5.4.0 allows a stack redzone cross in luaOpushvfstring because a protection mechanism wrongly calls luaDcallnoyield twice in a row...

CVE-2020-24342

Lua through 5.4.0 allows a stack redzone cross in luaOpushvfstring because a protection mechanism wrongly calls luaDcallnoyield twice in a row...

Stack overflow

Lua through 5.4.0 allows a stack redzone cross in luaOpushvfstring because a protection mechanism wrongly calls luaDcallnoyield twice in a row...

CVE-2020-24342

Lua through 5.4.0 allows a stack redzone cross in luaOpushvfstring because a protection mechanism wrongly calls luaDcallnoyield twice in a row...

CVE-2020-24342

Lua through 5.4.0 allows a stack redzone cross in luaOpushvfstring because a protection mechanism wrongly calls luaDcallnoyield twice in a row...

CVE-2020-24342

Lua through 5.4.0 allows a stack redzone cross in luaOpushvfstring because a protection mechanism wrongly calls luaDcallnoyield twice in a row...

CVE-2020-24342

Lua through 5.4.0 allows a stack redzone cross in luaOpushvfstring because a protection mechanism wrongly calls luaDcallnoyield twice in a row...

CVE-2020-24342

CVE-2020-24342 concerns Lua up to version 5.4.0 where a stack redzone cross is possible in luaO_pushvfstring because a protection mechanism incorrectly calls luaD_callnoyield twice in a row. The provided sources (NVD/NVD-based entries and related advisories) describe the issue's root cause as thi...

PT-2020-15693

Name of the Vulnerable Software and Affected Versions Lua versions prior to 5.4.1 Description The issue allows a stack redzone cross in luaO pushvfstring due to a protection mechanism wrongly calling luaD callnoyield twice in a row. Recommendations For Lua versions prior to 5.4.1, update to versi...

CVE-2020-24342: Improper Restriction of Operations within the Bounds of a Memory Buffer

Lua through 5.4.0 allows a stack redzone cross in luaOpushvfstring because a protection mechanism wrongly calls luaDcallnoyield twice in a row...