CVE-2025-46818

CVE-2025-46818 – Redis Lua Sandbox Cross-User Escape Sandbox escape via deprecated Lua APIs and mutable metatables on Redis 8.2.1. Overview Redis 8.2.1 keeps deprecated Lua builtins getfenv, setfenv, newproxy exposed to scripts and fails to lock metatables for basic types. An attacker can inject...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2025-1357)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1357 advisory. There exists a denial of service through Data corruption in gRPC-C++ - gRPC-C++ servers with transmit zero copy enabled through the channel arg GRPCARGTCPTXZEROCOPYENABLED can experience data...

EUVD-2024-22513

Malicious code in bioql PyPI...

Security update for luajit

This update for luajit fixes the following issues: CVE-2024-25176: Fixed stack-buffer-overflow in ljstrfmtwfnum in ljstrfmtnum.c bsc1246077 CVE-2024-25177: Fixed unsinking of IRFSTORE for NULL metatable bsc1246078 CVE-2024-25178: Fixed out-of-bounds read in the stack-overflow handler in ljstate.c...

SUSE-SU-2025:03378-1 Security update for luajit

This update for luajit fixes the following issues: - CVE-2024-25176: Fixed stack-buffer-overflow in ljstrfmtwfnum in ljstrfmtnum.c bsc1246077 - CVE-2024-25177: Fixed unsinking of IRFSTORE for NULL metatable bsc1246078 - CVE-2024-25178: Fixed out-of-bounds read in the stack-overflow handler in...

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).

...

openSUSE 15 Security Update : lua51-luajit (SUSE-SU-2025:02886-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02886-1 advisory. - CVE-2024-25176: Fixed stack-buffer-overflow in ljstrfmtwfnum in ljstrfmtnum.c bsc1246077 - CVE-2024-25177: Fixed unsinking of IRFSTORE for NULL...

Security update for lua51-luajit

This update for lua51-luajit fixes the following issues: CVE-2024-25176: Fixed stack-buffer-overflow in ljstrfmtwfnum in ljstrfmtnum.c bsc1246077 CVE-2024-25177: Fixed unsinking of IRFSTORE for NULL metatable bsc1246078 CVE-2024-25178: Fixed ut-of-bounds read in the stack-overflow handler in...

SUSE-SU-2025:02886-1 Security update for lua51-luajit

This update for lua51-luajit fixes the following issues: - CVE-2024-25176: Fixed stack-buffer-overflow in ljstrfmtwfnum in ljstrfmtnum.c bsc1246077 - CVE-2024-25177: Fixed unsinking of IRFSTORE for NULL metatable bsc1246078 - CVE-2024-25178: Fixed ut-of-bounds read in the stack-overflow handler i...

SUSE CVE-2024-25177

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IRFSTORE for NULL metatable, which leads to Denial of Service DoS...

DEBIAN-CVE-2024-25177

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IRFSTORE for NULL metatable, which leads to Denial of Service DoS...

ALPINE-CVE-2024-25177

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IRFSTORE for NULL metatable, which leads to Denial of Service DoS...

AZL-65535 CVE-2024-25177 affecting package luajit for versions less than 2.1.0-28

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IRFSTORE for NULL metatable, which leads to Denial of Service DoS...

CVE-2024-25177

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IRFSTORE for NULL metatable, which leads to Denial of Service DoS...

UBUNTU-CVE-2024-25177

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IRFSTORE for NULL metatable, which leads to Denial of Service DoS...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the snapunsink function in ljsnap.c.c, which the IRFSTORE process uses when handling a NULL metatable. An attacker can cause the application to crash or become unresponsive by triggering this condition...

CVE-2024-25177

LuaJIT versions through 2.1 and OpenRusty luajit2 before v2.1-20240314 are affected by a vulnerability involving an unsinking of IR_FSTORE for a NULL metatable. This root cause leads to a Denial of Service (DoS) . The vulnerability is also present in the ecs-service-connect-agent package on Amazo...

CVE-2024-25177

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IRFSTORE for NULL metatable, which leads to Denial of Service DoS...

CVE-2024-25177

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IRFSTORE for NULL metatable, which leads to Denial of Service DoS...

CVE-2024-25177

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IRFSTORE for NULL metatable, which leads to Denial of Service DoS...