CVE-2020-15890

LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is...

7.5 HighFix available

LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

3.13%Up 2.3 points since Apr 14, 2021

What each source reports

NVD Score used 7.5

LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.

Record: CVE-2020-15890
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-125
Updated: 2026-11-02

CVE List No score

LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.

Record: CVE-2020-15890
Updated: 2026-11-02

EUVDEUVD-2020-7864 No score

LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.

Record: EUVD-2020-7864
Updated: 2026-11-02

GitHub AdvisoriesGHSA-fv6p-x8x2-5jcc 7.5

LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is...

LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.

Record: GHSA-fv6p-x8x2-5jcc
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSVALPINE-CVE-2020-15890 7.5

LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.

Record: ALPINE-CVE-2020-15890
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 7.5

LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.

Record: CVE-2020-15890
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 6 moreShow less

OSVDEBIAN-CVE-2020-15890 7.5

LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.

Record: DEBIAN-CVE-2020-15890
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2021-1025 7.5

luajit security update

LuaJIT is a Just-In-Time Compiler (JIT) for the Lua programming language. Lua is a powerful, dynamic and light-weight programming language. It may be embedded or used as a general-purpose, stand-alone language.\r\n\r\n Security Fix(es):\r\n\r\n LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.(CVE-2020-15890)\r\n\r\n

Record: OESA-2021-1025
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHBA-2020:3172 7.5

Red Hat Bug Fix Advisory: Advanced Virtualization bug fix and enhancement update

Record: RHBA-2020:3172
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2020-15890 7.5

LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.

Record: UBUNTU-CVE-2020-15890
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVMGASA-2020-0342 No score

Updated luajit packages fix security vulnerability

An issue has been found in luajit, a just in time compiler for Lua. An out-of-bounds read could happen because __gc handler frame traversal is mishandled (CVE-2020-15890).

Record: MGASA-2020-0342
Updated: 2026-11-02

OSVUSN-4501-1 No score

luajit vulnerability

It was discovered that an out-of-bounds read existed in LuaJIT. An attacker could use this to cause a denial of service (application crash) or possibly expose sensitive information. (CVE-2020-15890)

Record: USN-4501-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`luajit` Alpine:v3.13	before 2.2.0-r3	2.2.0-r3
`luajit` Debian:12	before 2.1.0~beta3+git20210112+dfsg-2	2.1.0~beta3+git20210112+dfsg-2
`luajit` Debian:13	before 2.1.0~beta3+git20210112+dfsg-2	2.1.0~beta3+git20210112+dfsg-2
`luajit` Debian:14	before 2.1.0~beta3+git20210112+dfsg-2	2.1.0~beta3+git20210112+dfsg-2
`luajit` Debian:9	before 2.0.4+dfsg-1+deb9u1, plus listed versions 2.0.4+dfsg-1	2.0.4+dfsg-1+deb9u1
`luajit` Debian:11	before 2.1.0~beta3+dfsg-5.3+deb11u1, plus listed versions 2.1.0~beta3+dfsg-5.3	2.1.0~beta3+dfsg-5.3+deb11u1
`luajit` Mageia:7	before 2.1.0-0.beta3.5.mga7	2.1.0-0.beta3.5.mga7
`luajit` openEuler:20.03-LTS	before 2.1.0-1.oe1	2.1.0-1.oe1
`luajit` openEuler:20.03-LTS-SP1	before 2.1.0-1.oe1	2.1.0-1.oe1
`SLOF` Red Hat:advanced_virtualization:8.2::el8	before 0:20191022-3.git899d9883.module+el8.2.0+5449+efc036dd	0:20191022-3.git899d9883.module+el8.2.0+5449+efc036dd

Show 204 moreShow less

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-15890 is a high vulnerability (CVSS 7.5) in Luajit, published July 21, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.13%, the 87th percentile. Fixed in luajit 2.2.0-r3.

References

Show 75 moreShow less

This page doesn't list everything

Also not on the record: 15 package claims. ID and package lookups still check them.

Affected packages
Package	Affected	Fixed
`hivex` Red Hat:advanced_virtualization:8.2::el8	before 0:1.3.18-20.module+el8.2.0+5588+63a201c3	0:1.3.18-20.module+el8.2.0+5588+63a201c3
`hivex-debuginfo` Red Hat:advanced_virtualization:8.2::el8	before 0:1.3.18-20.module+el8.2.0+5588+63a201c3	0:1.3.18-20.module+el8.2.0+5588+63a201c3
`hivex-debugsource` Red Hat:advanced_virtualization:8.2::el8	before 0:1.3.18-20.module+el8.2.0+5588+63a201c3	0:1.3.18-20.module+el8.2.0+5588+63a201c3
`hivex-devel` Red Hat:advanced_virtualization:8.2::el8	before 0:1.3.18-20.module+el8.2.0+5588+63a201c3	0:1.3.18-20.module+el8.2.0+5588+63a201c3
`libguestfs` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-bash-completion` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-benchmarking` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-benchmarking-debuginfo` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-debuginfo` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-debugsource` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-devel` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-gfs2` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-gobject` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-gobject-debuginfo` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-gobject-devel` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-inspect-icons` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-java` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-java-debuginfo` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-java-devel` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-javadoc` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-man-pages-ja` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-man-pages-uk` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-rescue` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-rsync` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-tools` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-tools-c` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-tools-c-debuginfo` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libguestfs-winsupport` Red Hat:advanced_virtualization:8.2::el8	before 0:8.2-1.module+el8.2.0+5590+82cd80df	0:8.2-1.module+el8.2.0+5590+82cd80df
`libguestfs-xfs` Red Hat:advanced_virtualization:8.2::el8	before 1:1.40.2-24.module+el8.2.1+7154+47ffd890	1:1.40.2-24.module+el8.2.1+7154+47ffd890
`libiscsi` Red Hat:advanced_virtualization:8.2::el8	before 0:1.18.0-8.module+el8.2.0+4793+b09dd2fb	0:1.18.0-8.module+el8.2.0+4793+b09dd2fb
`libiscsi-debuginfo` Red Hat:advanced_virtualization:8.2::el8	before 0:1.18.0-8.module+el8.2.0+4793+b09dd2fb	0:1.18.0-8.module+el8.2.0+4793+b09dd2fb
`libiscsi-debugsource` Red Hat:advanced_virtualization:8.2::el8	before 0:1.18.0-8.module+el8.2.0+4793+b09dd2fb	0:1.18.0-8.module+el8.2.0+4793+b09dd2fb
`libiscsi-devel` Red Hat:advanced_virtualization:8.2::el8	before 0:1.18.0-8.module+el8.2.0+4793+b09dd2fb	0:1.18.0-8.module+el8.2.0+4793+b09dd2fb
`libiscsi-utils` Red Hat:advanced_virtualization:8.2::el8	before 0:1.18.0-8.module+el8.2.0+4793+b09dd2fb	0:1.18.0-8.module+el8.2.0+4793+b09dd2fb
`libiscsi-utils-debuginfo` Red Hat:advanced_virtualization:8.2::el8	before 0:1.18.0-8.module+el8.2.0+4793+b09dd2fb	0:1.18.0-8.module+el8.2.0+4793+b09dd2fb
`libnbd` Red Hat:advanced_virtualization:8.2::el8	before 0:1.2.2-1.module+el8.2.0+5644+32ac38d4	0:1.2.2-1.module+el8.2.0+5644+32ac38d4
`libnbd-debuginfo` Red Hat:advanced_virtualization:8.2::el8	before 0:1.2.2-1.module+el8.2.0+5644+32ac38d4	0:1.2.2-1.module+el8.2.0+5644+32ac38d4
`libnbd-debugsource` Red Hat:advanced_virtualization:8.2::el8	before 0:1.2.2-1.module+el8.2.0+5644+32ac38d4	0:1.2.2-1.module+el8.2.0+5644+32ac38d4
`libnbd-devel` Red Hat:advanced_virtualization:8.2::el8	before 0:1.2.2-1.module+el8.2.0+5644+32ac38d4	0:1.2.2-1.module+el8.2.0+5644+32ac38d4
`libtpms` Red Hat:advanced_virtualization:8.2::el8	before 0:0.7.0-1.20191018gitdc116933b7.module+el8.2.0+4793+b09dd2fb	0:0.7.0-1.20191018gitdc116933b7.module+el8.2.0+4793+b09dd2fb