Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-24342
HistoryAug 13, 2020 - 12:00 a.m.

CVE-2020-24342

2020-08-1300:00:00
ubuntu.com
ubuntu.com
8

0.001 Low

EPSS

Percentile

49.9%

Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because
a protection mechanism wrongly calls luaD_callnoyield twice in a row.

Notes

Author Note
mdeslaur couldn’t reproduce on lua earlier than 5.4, and problematic code doesn’t seem present. Marking as not-affected.

0.001 Low

EPSS

Percentile

49.9%