Every CVE Search/ Get API key

CVE-2019-6706

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might...

7.5 HighPublic exploitFix available

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

17.4%Up 12.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Record
CVE-2019-6706
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-416
Updated
2026-11-02
CVE List No score

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Record
CVE-2019-6706
Updated
2026-11-02
EUVDEUVD-2019-16264 No score

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Record
EUVD-2019-16264
Updated
2026-11-03
GitHub AdvisoriesGHSA-f6gj-vrmg-ccf7 7.5

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might...

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Record
GHSA-f6gj-vrmg-ccf7
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVALPINE-CVE-2019-6706 7.5

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Record
ALPINE-CVE-2019-6706
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-6669 7.5

CVE-2019-6706 affecting package lua for versions less than 5.3.5-11

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Record
AZL-6669
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 11 moreShow less
OSVBELL-CVE-2019-6706 7.5

CVE-2019-6706 does not affect BellSoft software

Record
BELL-CVE-2019-6706
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Record
CVE-2019-6706
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2019-6706 7.5

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Record
DEBIAN-CVE-2019-6706
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2026-553 7.5

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Record
JLSEC-2026-553
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSVRHSA-2019:3706 7.5

Red Hat Security Advisory: lua security and bug fix update

Record
RHSA-2019:3706
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2019:3706 7.5

Moderate: lua security and bug fix update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

  • lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service (CVE-2019-6706)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.

Record
RLSA-2019:3706
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-6706 7.5

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Record
UBUNTU-CVE-2019-6706
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2019:3706 No score

Moderate: lua security and bug fix update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

  • lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service (CVE-2019-6706)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2019:3706
Updated
2026-11-02
OSVopenSUSE-SU-2019:0175-1 No score

Security update for lua53

This update for lua53 fixes the following issues:

Security issue fixed:

  • CVE-2019-6706: Fixed a use-after-free bug in the lua_upvaluejoin function of lapi.c (bsc#1123043)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:0175-1
Updated
2026-11-02
OSVSUSE-SU-2019:0247-1 No score

Security update for lua53

This update for lua53 fixes the following issues:

Security issue fixed:

  • CVE-2019-6706: Fixed a use-after-free bug in the lua_upvaluejoin function of lapi.c (bsc#1123043)
Record
SUSE-SU-2019:0247-1
Updated
2026-11-02
OSVUSN-3941-1 No score

lua5.3 vulnerability

Fady Othman discovered that Lua incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service.

Record
USN-3941-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
lua5.3
Alpine:v3.10
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.11
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.12
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.13
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.14
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.15
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.16
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.17
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.18
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.19
 before 5.3.5-r2
5.3.5-r2
Show 47 moreShow less
Affected packages
PackageAffectedFixed
lua5.3
Alpine:v3.20
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.21
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.22
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.23
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.24
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.6
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.7
 before 5.3.5-r0
5.3.5-r0
lua5.3
Alpine:v3.8
 before 5.3.5-r2
5.3.5-r2
lua5.3
Alpine:v3.9
 before 5.3.5-r2
5.3.5-r2
lua5.4
Alpine:v3.14
 before 5.3.5-r2
5.3.5-r2
lua5.4
Alpine:v3.15
 before 5.3.5-r2
5.3.5-r2
lua5.4
Alpine:v3.16
 before 5.3.5-r2
5.3.5-r2
lua5.4
Alpine:v3.17
 before 5.3.5-r2
5.3.5-r2
lua5.4
Alpine:v3.18
 before 5.3.5-r2
5.3.5-r2
lua5.4
Alpine:v3.19
 before 5.3.5-r2
5.3.5-r2
lua5.4
Alpine:v3.20
 before 5.3.5-r2
5.3.5-r2
lua5.4
Alpine:v3.21
 before 5.3.5-r2
5.3.5-r2
lua5.4
Alpine:v3.22
 before 5.3.5-r2
5.3.5-r2
lua5.4
Alpine:v3.23
 before 5.3.5-r2
5.3.5-r2
lua5.4
Alpine:v3.24
 before 5.3.5-r2
5.3.5-r2
lua
AlmaLinux:8
 before 5.3.4-11.el8
5.3.4-11.el8
lua-devel
AlmaLinux:8
 before 5.3.4-11.el8
5.3.4-11.el8
lua
Azure Linux:2
 before 5.3.5-11
5.3.5-11
lua5.3
Debian:12
 before 5.3.6-1
5.3.6-1
lua5.3
Debian:13
 before 5.3.6-1
5.3.6-1
lua5.3
Debian:14
 before 5.3.6-1
5.3.6-1
lua5.3
Debian:10
From an advisory covering 2 CVEs
 before 5.3.3-1.1+deb10u1, plus listed versions
5.3.3-1.1
5.3.3-1.1+deb10u1
Lua_jll
Julia
 before 5.3.6+0
5.3.6+0
lua
Red Hat:enterprise_linux:8::appstream
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua
Red Hat:enterprise_linux:8::baseos
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua-libs
Red Hat:enterprise_linux:8::baseos
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua
Red Hat:enterprise_linux:8::crb
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua-devel
Red Hat:enterprise_linux:8::crb
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua-libs-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua
Rocky Linux:8
 before 0:5.3.4-11.el8
0:5.3.4-11.el8
lua53
SUSE:Linux Enterprise Module for Basesystem 15
 before 5.3.4-3.3.2
5.3.4-3.3.2
lua5.3
Ubuntu:16.04:LTS
 before 5.3.1-1ubuntu2.1, plus listed versions
5.3.1-15.3.1-1ubuntu2
5.3.1-1ubuntu2.1
lua5.3
Ubuntu:18.04:LTS
 before 5.3.3-1ubuntu0.18.04.1, plus listed versions
5.3.3-1
5.3.3-1ubuntu0.18.04.1
lua53
openSUSE:Leap 15.0
 before 5.3.4-lp150.2.3.1
5.3.4-lp150.2.3.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBLua 5.3.5 - 'debug.upvaluejoin' Use After Free2019-01-25

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-6706 is a high vulnerability (CVSS 7.5) in Lua, published January 23, 2019. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 17.4%, the 97th percentile. Fixed in lua5.3 5.3.5-r2.

References

Show 24 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open