Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40338
HistoryApr 28, 2023 - 5:49 p.m.

Denial Of Services (DoS)

2023-04-2817:49:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
denial of services
lua5.4
vulnerability
finalizer call
heap-based buffer over-read
application crash
software

EPSS

0.001

Percentile

49.8%

lua5.4 is vulnerable to Denial Of Services (DoS). The vulnerability exists because the erroneous finalizer call during a tail call leads to a heap-based buffer over-read, allowing an attacker to cause an application crash