Rocky Linux 9 [CIQ] Security Update: lua / lua-debuginfo / lua-debugsource / lua-devel / lua-libs / etc (crlsa-2022_7329)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227329 advisory. lua: heap buffer overflow in luaGerrormsg in ldebug.c due to uncontrolled recursion in error handling CVE-2022-33099 Tenable has extracted the preceding description...

MiracleLinux 9 : lua-5.4.2-4.el9.3 (AXSA:2023-5088:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5088:01 advisory. lua: heap buffer overflow in luaGerrormsg in ldebug.c due to uncontrolled recursion in error handling CVE-2022-33099 Tenable has extracted the preceding...

lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling

A vulnerability was found in Lua. During error handling, the luaGerrormsg component uses slots from EXTRASTACK. Some errors can recur such as a string overflow while creating an error message in 'luaGrunerror', or a C-stack overflow before calling the message handler, causing a crash that leads t...