34 matches found
Astra Linux – Vulnerability in lua5.3
The ldebug.c file in Lua 5.4.0 allows for a negation overflow and segmentation fault in getlocal and setlocal functions, as demonstrated by getlocal3,2^31...
Unity Linux 20.1050e / 20.1070e Security Update: lua (UTSA-2025-000295)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-000295 advisory. ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31. Tenable has extracted the...
JLSEC-2026-555
ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31...
PT-2026-47114
ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31...
EulerOS Virtualization 2.10.0 : syslinux (EulerOS-SA-2026-1199)
According to the versions of the syslinux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by...
MiracleLinux 8 : lua-5.3.4-12.el8 (AXSA:2021-2619:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2619:01 advisory. lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370 Tenable has extracted the preceding description block directly from the...
Unity Linux 20.1070e Security Update: syslinux (UTSA-2025-993338)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993338 advisory. ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31. Tenable has extracted the...
EUVD-2020-17102
Malware in sbrugna...
OESA-2025-1279 syslinux security update
The Syslinux Project covers lightweight bootloaders for MS-DOS FAT filesystems SYSLINUX, network booting PXELINUX, bootable "El Torito" CD-ROMs ISOLINUX, and Linux ext2/ext3/ext4 or btrfs filesystems EXTLINUX. The project also includes MEMDISK, a tool to boot legacy operating systems such as DOS...
OESA-2025-1278 syslinux security update
The Syslinux Project covers lightweight bootloaders for MS-DOS FAT filesystems SYSLINUX, network booting PXELINUX, bootable "El Torito" CD-ROMs ISOLINUX, and Linux ext2/ext3/ext4 or btrfs filesystems EXTLINUX. The project also includes MEMDISK, a tool to boot legacy operating systems such as DOS...
OESA-2024-2169 lua security update
Lua is a powerful, efficient, lightweight, embeddable scripting language. It supports procedural programming, object-oriented programming, functional programming, data-driven programming, and data description. Security Fixes: ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault...
ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal as demonstrated by getlocal(32^31).
...
BIT-LUA-2020-24370
ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31...
SUSE CVE-2020-24370
ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31...
CVE-2021-40410
An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 4 the dnsdata-dns1 variable, that has the value of the dns1 parameter provided through the SetLocal API, is not validated properly. This would lead to an OS command...
CVE-2021-40410
An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 4 the dnsdata-dns1 variable, that has the value of the dns1 parameter provided through the SetLocal API, is not validated properly. This would lead to an OS command...
CVE-2021-40410: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 4 the dnsdata-dns1 variable, that has the value of the dns1 parameter provided through the SetLocal API, is not validated properly. This would lead to an OS command...
PT-2022-4168
Name of the Vulnerable Software and Affected Versions Reolink RLC-410W version 3.0.0.136 20121102 Description An OS command injection issue exists in the device network settings functionality due to improper validation of the dns1 parameter provided through the SetLocal API. This allows a remote...
Oracle Linux 8 : lua (ELSA-2021-4510)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4510 advisory. 5.3.4-12 - Fix segfault in getlocal and setlocal 1880445 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
