CVE-2021-43519

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform...

5.5 MediumFix available

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

1.23%Up 0.4 points since Nov 10, 2021

What each source reports

NVD Score used 5.5

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Record: CVE-2021-43519
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-674
Updated: 2026-11-02

CVE List No score

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Record: CVE-2021-43519
Updated: 2026-11-02

EUVDEUVD-2021-30448 No score

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Record: EUVD-2021-30448
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g78p-3v3v-h7wm 5.5

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform...

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Record: GHSA-g78p-3v3v-h7wm
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-674, CWE-787
Updated: 2026-11-02

OSVAZL-41261 5.5

CVE-2021-43519 affecting package ceph for versions less than 18.2.2-3

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Record: AZL-41261
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-05

OSVAZL-41445 5.5

CVE-2021-43519 affecting package ntopng for versions less than 5.2.1-5

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Record: AZL-41445
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-05

Show 15 moreShow less

OSVAZL-41574 5.5

CVE-2021-43519 affecting package lua for versions less than 5.4.4-1

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Record: AZL-41574
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-05

OSVAZL-41866 5.5

CVE-2021-43519 affecting package memcached for versions less than 1.6.27-2

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Record: AZL-41866
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-05

OSVAZL-6672 5.5

CVE-2021-43519 affecting package lua for versions less than 5.4.3-1

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Record: AZL-6672
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVBELL-CVE-2021-43519 5.5

CVE-2021-43519 does not affect BellSoft software

Record: BELL-CVE-2021-43519
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 5.5

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Record: CVE-2021-43519
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2021-43519 5.5

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Record: DEBIAN-CVE-2021-43519
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVJLSEC-2026-556 5.5

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Record: JLSEC-2026-556
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

OSVRHSA-2023:0957 5.5

Red Hat Security Advisory: lua security update

Record: RHSA-2023:0957
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:1211 7.0

Red Hat Security Advisory: lua security update

Record: RHSA-2023:1211
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2023:0957 7.0

Moderate: lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

lua: use after free allows Sandbox Escape (CVE-2021-44964)
lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2023:0957
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2021-43519 5.5

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Record: UBUNTU-CVE-2021-43519
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVALSA-2023:0957 No score

Moderate: lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

lua: use after free allows Sandbox Escape (CVE-2021-44964)
lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2023:0957
Updated: 2026-11-02

OSVBIT-lua-2021-43519 No score

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

Record: BIT-lua-2021-43519
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12156-1 No score

liblua5_4-5-32bit-5.4.4-4.1 on GA media

These are all security issues fixed in the liblua5_4-5-32bit-5.4.4-4.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12156-1
Updated: 2026-11-02

OSVopenSUSE-SU-2025:15401-1 No score

liblua5_5-5-5.5.0~beta1-1.1 on GA media

These are all security issues fixed in the liblua5_5-5-5.5.0~beta1-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2025:15401-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`lua` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.4.4-2.el9_1	5.4.4-2.el9_1
`lua-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.4.4-2.el9_1	5.4.4-2.el9_1
`lua-libs` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.4.4-2.el9_1	5.4.4-2.el9_1
`ceph` Azure Linux:3	before 18.2.2-3	18.2.2-3
`ntopng` Azure Linux:3	before 5.2.1-5	5.2.1-5
`lua` Azure Linux:3	before 5.4.4-1	5.4.4-1
`memcached` Azure Linux:3	before 1.6.27-2	1.6.27-2
`lua` Azure Linux:2	before 5.4.3-1	5.4.3-1
`lua` Bitnami	5.1.0 up to 5.3.5, 5.4.0 up to 5.4.4	5.3.55.4.4
`lua5.4` Debian:12	before 5.4.4-1	5.4.4-1

Show 159 moreShow less

Affected packages
Package	Affected	Fixed
`lua5.4` Debian:13	before 5.4.4-1	5.4.4-1
`lua5.4` Debian:14	before 5.4.4-1	5.4.4-1
`Lua_jll` Julia	5.4.3+0 up to 5.4.4+0	5.4.4+0
`lua` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-libs-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua` Red Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-debugsource` Red Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-libs` Red Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-libs-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-debugsource` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-devel` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-libs-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-debugsource` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-libs-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua` Red Hat:rhel_eus:9.0::baseos From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-debuginfo` Red Hat:rhel_eus:9.0::baseos From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-debugsource` Red Hat:rhel_eus:9.0::baseos From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-libs` Red Hat:rhel_eus:9.0::baseos From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-libs-debuginfo` Red Hat:rhel_eus:9.0::baseos From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua` Red Hat:rhel_eus:9.0::crb From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-debugsource` Red Hat:rhel_eus:9.0::crb From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-devel` Red Hat:rhel_eus:9.0::crb From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-libs-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua` Rocky Linux:9 From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`bam` Ubuntu:16.04:LTS	All versions, plus listed versions 0.4.0-3	None known
`blobby` Ubuntu:16.04:LTS	All versions, plus listed versions 1.0-3	None known
`darktable` Ubuntu:16.04:LTS	All versions, plus listed versions 1.6.8-11.6.9-12.0.0-12.0.1-12.0.3-1	None known
`emscripten` Ubuntu:16.04:LTS	All versions, plus listed versions 1.22.1-1build1	None known
`freedroidrpg` Ubuntu:16.04:LTS	All versions, plus listed versions 0.15.1-1build1	None known
`fs-uae` Ubuntu:16.04:LTS	All versions, plus listed versions 2.4.1+ds-3ubuntu12.6.1+dfsg-22.6.2+dfsg-22.6.2+dfsg-32.6.2+dfsg-3build1	None known
`golly` Ubuntu:16.04:LTS	All versions, plus listed versions 2.6-2build12.7-1	None known
`scite` Ubuntu:16.04:LTS	All versions, plus listed versions 3.5.0-13.6.0-1	None known
`scorched3d` Ubuntu:16.04:LTS	All versions, plus listed versions 43.3.d+dfsg-1.1build143.3.d+dfsg-1.1build243.3.d+dfsg-1.2	None known
`tarantool` Ubuntu:16.04:LTS	All versions, plus listed versions 1.6.3.539.g211672f-11.6.7.588.g76bbd9c-11.6.7.588.g76bbd9c-1build1	None known
`vifm` Ubuntu:16.04:LTS	All versions, plus listed versions 0.7.8-30.7.8-3build1	None known
`widelands` Ubuntu:16.04:LTS	All versions, plus listed versions 1:18-3build21:18-3build3	None known
`bam` Ubuntu:18.04:LTS	All versions, plus listed versions 0.4.0-5	None known
`blobby` Ubuntu:18.04:LTS	All versions, plus listed versions 1.0-31.0-3build1	None known
`darktable` Ubuntu:18.04:LTS	All versions, plus listed versions 2.2.5-22.4.0-12.4.1-12.4.2-1	None known
`eja` Ubuntu:18.04:LTS	All versions, plus listed versions 9.5.20-1	None known
`emscripten` Ubuntu:18.04:LTS	All versions, plus listed versions 1.22.1-1build1	None known
`freedroidrpg` Ubuntu:18.04:LTS	All versions, plus listed versions 0.16.1-2build10.16.1-3	None known
`fs-uae` Ubuntu:18.04:LTS	All versions, plus listed versions 2.8.3+dfsg-12.8.4+dfsg-1	None known
`golly` Ubuntu:18.04:LTS	All versions, plus listed versions 2.8-1	None known
`goxel` Ubuntu:18.04:LTS	All versions, plus listed versions 0.7.1-20.7.2-1	None known
`scite` Ubuntu:18.04:LTS	All versions, plus listed versions 3.7.2-14.0.0-14.0.0-1ubuntu0.1	None known
`scorched3d` Ubuntu:18.04:LTS	All versions, plus listed versions 44+dfsg-1build1	None known
`vifm` Ubuntu:18.04:LTS	All versions, plus listed versions 0.9-10.9.1-1	None known
`wcc` Ubuntu:18.04:LTS	All versions, plus listed versions 0.0.2+dfsg-20.0.2+dfsg-2ubuntu10.0.2+dfsg-3	None known
`widelands` Ubuntu:18.04:LTS	All versions, plus listed versions 1:19+repack-41:19+repack-4build21:19+repack-4build31:19+repack-4build41:19+repack-4ubuntu0.18.04.1	None known
`bam` Ubuntu:20.04:LTS	All versions, plus listed versions 0.5.1-10.5.1-2	None known
`blobby` Ubuntu:20.04:LTS	All versions, plus listed versions 1.0-3build11.0-3build2	None known
`darktable` Ubuntu:20.04:LTS	All versions, plus listed versions 2.6.0-12.6.2-32.6.3-12.6.3-1build12.6.3-1build23.0.1-0ubuntu1	None known
`eja` Ubuntu:20.04:LTS	All versions, plus listed versions 9.5.20-1	None known
`freedroidrpg` Ubuntu:20.04:LTS	All versions, plus listed versions 0.16.1-5	None known
`fs-uae` Ubuntu:20.04:LTS	All versions, plus listed versions 2.8.4+dfsg-2build13.0.2+dfsg-13.0.2+dfsg-2	None known
`golly` Ubuntu:20.04:LTS	All versions, plus listed versions 3.2-43.3-13.3-1build1	None known
`goxel` Ubuntu:20.04:LTS	All versions, plus listed versions 0.8.1-10.8.1-1build1	None known
`naev` Ubuntu:20.04:LTS	All versions, plus listed versions 0.7.0-2build100.7.0-2build110.7.0-30.7.0-3build1	None known
`rust-lua52-sys` Ubuntu:20.04:LTS	All versions, plus listed versions 0.1.2-1	None known
`scite` Ubuntu:20.04:LTS	All versions, plus listed versions 4.2.0-14.2.1-14.2.2-14.2.3-14.3.0-14.3.0-1build1	None known
`scorched3d` Ubuntu:20.04:LTS	All versions, plus listed versions 44+dfsg-544+dfsg-5build1	None known
`tarantool` Ubuntu:20.04:LTS	All versions, plus listed versions 1.9.1.26.g63eb81e3c-1.1build11.9.1.26.g63eb81e3c-1.1build21.9.1.26.g63eb81e3c-1.1build3	None known
`tup` Ubuntu:20.04:LTS	All versions, plus listed versions 0.7.8-3	None known
`vifm` Ubuntu:20.04:LTS	All versions, plus listed versions 0.10.1-20.10.1-3	None known
`wcc` Ubuntu:20.04:LTS	All versions, plus listed versions 0.0.2+dfsg-4ubuntu10.0.2+dfsg-4.1	None known
`widelands` Ubuntu:20.04:LTS	All versions, plus listed versions 1:19+repack-6build21:20-11:20-1build11:20-1ubuntu11:20-21:20-2build2	None known
`bam` Ubuntu:22.04:LTS	All versions, plus listed versions 0.5.1-20.5.1-3	None known
`blobby` Ubuntu:22.04:LTS	All versions, plus listed versions 1.0-3build2	None known
`darktable` Ubuntu:22.04:LTS	All versions, plus listed versions 3.6.0-0ubuntu13.8.0-23.8.0-33.8.0-3build13.8.0-3build23.8.1-13.8.1-2	None known
`eja` Ubuntu:22.04:LTS	All versions, plus listed versions 9.5.20-1	None known
`emscripten` Ubuntu:22.04:LTS	All versions, plus listed versions 2.0.13~dfsg-13.1.1~dfsg+~1.39.6-5ubuntu43.1.2~dfsg+~1.39.6-6ubuntu13.1.3~dfsg-4ubuntu13.1.3~dfsg-5ubuntu13.1.4~dfsg-7ubuntu13.1.5~dfsg-3ubuntu1	None known
`freedroidrpg` Ubuntu:22.04:LTS	All versions, plus listed versions 0.16.1-6	None known
`fs-uae` Ubuntu:22.04:LTS	All versions, plus listed versions 3.0.5+dfsg-13.1.35-13.1.47-13.1.59-13.1.62-13.1.66-1	None known
`golly` Ubuntu:22.04:LTS	All versions, plus listed versions 3.3-1build1	None known
`goxel` Ubuntu:22.04:LTS	All versions, plus listed versions 0.10.6-30.10.8-1	None known
`naev` Ubuntu:22.04:LTS	All versions, plus listed versions 0.8.0-10.8.2-1	None known
`rust-lua52-sys` Ubuntu:22.04:LTS	All versions, plus listed versions 0.1.2-1	None known
`scite` Ubuntu:22.04:LTS	All versions, plus listed versions 4.4.5-25.1.3-15.1.5-15.1.6-15.2.0-15.2.1-1	None known
`scorched3d` Ubuntu:22.04:LTS	All versions, plus listed versions 44+dfsg-744+dfsg-7build1	None known
`tarantool` Ubuntu:22.04:LTS	All versions, plus listed versions 2.6.0-12.6.0-1ubuntu12.6.0-1ubuntu22.6.0-1ubuntu3	None known
`tup` Ubuntu:22.04:LTS	All versions, plus listed versions 0.7.8-3	None known
`vifm` Ubuntu:22.04:LTS	All versions, plus listed versions 0.10.1-40.12-1	None known
`wcc` Ubuntu:22.04:LTS	All versions, plus listed versions 0.0.2+dfsg-4.1build2	None known
`widelands` Ubuntu:22.04:LTS	All versions, plus listed versions 1:21-1build31:21-1build41:21-1build6	None known
`bam` Ubuntu:24.04:LTS	All versions, plus listed versions 0.5.1-3	None known
`blobby` Ubuntu:24.04:LTS	All versions, plus listed versions 1.1+ds-11.1+ds-1ubuntu1	None known
`darktable` Ubuntu:24.04:LTS	All versions, plus listed versions 4.4.2-1ubuntu14.4.2-1ubuntu24.4.2-1.14.4.2-1.1build14.6.1-24.6.1-2build34.6.1-2build44.6.1-2ubuntu1	None known
`emscripten` Ubuntu:24.04:LTS	All versions, plus listed versions 3.1.6~dfsg-53.1.6~dfsg-63.1.6~dfsg-7	None known
`freedroidrpg` Ubuntu:24.04:LTS	All versions, plus listed versions 1.0-11.0-1build11.0-1build2	None known
`fs-uae` Ubuntu:24.04:LTS	All versions, plus listed versions 3.1.66-23.1.66-2build13.1.66-2build2	None known
`golly` Ubuntu:24.04:LTS	All versions, plus listed versions 3.3-1.1build13.3-1.1build23.3-1.1build3	None known
`goxel` Ubuntu:24.04:LTS	All versions, plus listed versions 0.11.0-1.10.11.0-1.1build20.11.0-1.1build3	None known
`naev` Ubuntu:24.04:LTS	All versions, plus listed versions 0.8.2-1build10.8.2-1build20.8.2-1build3	None known
`rust-lua52-sys` Ubuntu:24.04:LTS	All versions, plus listed versions 0.1.2-1	None known
`scite` Ubuntu:24.04:LTS	All versions, plus listed versions 5.3.6-15.3.8-15.3.9-15.4.0-15.4.1-15.4.1-1build15.4.1-1build2	None known
`scorched3d` Ubuntu:24.04:LTS	All versions, plus listed versions 44+dfsg-8build144+dfsg-8build244+dfsg-8build3	None known
`tarantool` Ubuntu:24.04:LTS	All versions, plus listed versions 2.6.0-1.2build12.6.0-1.32.6.0-1.3build12.6.0-1.3build32.6.0-1.3build4	None known
`tup` Ubuntu:24.04:LTS	All versions, plus listed versions 0.7.11-30.7.11-4	None known
`vifm` Ubuntu:24.04:LTS	All versions, plus listed versions 0.12-10.12-1build10.12-1build2	None known
`wcc` Ubuntu:24.04:LTS	All versions, plus listed versions 0.0.2+dfsg-4.40.0.2+dfsg-4.4build10.0.2+dfsg-4.4build2	None known
`widelands` Ubuntu:24.04:LTS	All versions, plus listed versions 2:1.1-42:1.1-4build12:1.1-4build32:1.1-4build4	None known
`bam` Ubuntu:25.10	All versions, plus listed versions 0.5.1-3	None known
`blobby` Ubuntu:25.10	All versions, plus listed versions 1.1.1+ds-11.1.1+ds-1build11.1.1+ds-2	None known
`darktable` Ubuntu:25.10	All versions, plus listed versions 5.0.1-0ubuntu15.0.1-0ubuntu25.0.1-15.0.1-2	None known
`emscripten` Ubuntu:25.10	All versions, plus listed versions 3.1.69+dfsg-13.1.69+dfsg-3	None known
`freedroidrpg` Ubuntu:25.10	All versions, plus listed versions 1.0-1build2	None known
`fs-uae` Ubuntu:25.10	All versions, plus listed versions 3.1.66-2build2	None known
`golly` Ubuntu:25.10	All versions, plus listed versions 3.3-1.1build3	None known
`goxel` Ubuntu:25.10	All versions, plus listed versions 0.11.0-1.1build3	None known
`naev` Ubuntu:25.10	All versions, plus listed versions 0.8.2-1build30.8.2-1build4	None known
`rust-lua52-sys` Ubuntu:25.10	All versions, plus listed versions 0.1.2-1	None known
`scite` Ubuntu:25.10	All versions, plus listed versions 5.5.5-15.5.6-1	None known
`scorched3d` Ubuntu:25.10	All versions, plus listed versions 44+dfsg-8build3	None known
`tarantool` Ubuntu:25.10	All versions, plus listed versions 2.6.0-1.4build1	None known
`tup` Ubuntu:25.10	All versions, plus listed versions 0.8-10.8-1build1	None known
`vifm` Ubuntu:25.10	All versions, plus listed versions 0.12-1build20.14-3	None known
`widelands` Ubuntu:25.10	All versions, plus listed versions 2:1.2.1-2build12:1.2.1-3	None known
`bam` Ubuntu:26.10	All versions, plus listed versions 0.5.1-3build1	None known
`blobby` Ubuntu:26.10	All versions, plus listed versions 1.1.1+ds-2build11.1.1+ds-3	None known
`darktable` Ubuntu:26.10	All versions, plus listed versions 5.4.1-15.4.1-1build15.4.1-1build2	None known
`emscripten` Ubuntu:26.10	All versions, plus listed versions 3.1.69+dfsg-46.0.5+dfsg+~1.41.5-2	None known
`freedroidrpg` Ubuntu:26.10	All versions, plus listed versions 1.0-1build21.0+ds-1	None known
`fs-uae` Ubuntu:26.10	All versions, plus listed versions 3.2.35-2	None known
`golly` Ubuntu:26.10	All versions, plus listed versions 3.3-1.1build4	None known
`goxel` Ubuntu:26.10	All versions, plus listed versions 0.11.0-1.1build40.15.1-1ubuntu1	None known
`naev` Ubuntu:26.10	All versions, plus listed versions 0.8.2-1build5	None known
`rust-lua52-sys` Ubuntu:26.10	All versions, plus listed versions 0.1.2-1build10.1.3+ds-1	None known
`scite` Ubuntu:26.10	All versions, plus listed versions 5.5.8-25.6.2-15.6.3-15.6.4-15.6.5-15.6.6-1	None known
`scorched3d` Ubuntu:26.10	All versions, plus listed versions 44+dfsg-8build444+dfsg-8build5	None known
`tup` Ubuntu:26.10	All versions, plus listed versions 0.8-5	None known
`vifm` Ubuntu:26.10	All versions, plus listed versions 0.14.3-10.14.3-30.14.4-1	None known
`wcc` Ubuntu:26.10	All versions, plus listed versions 0.0.7+dfsg-2build20.0.7+dfsg-2build3	None known
`widelands` Ubuntu:26.10	All versions, plus listed versions 2:1.3.1-32:1.3.1-4	None known
`bam` Ubuntu:26.04:LTS	All versions, plus listed versions 0.5.1-30.5.1-3build1	None known
`blobby` Ubuntu:26.04:LTS	All versions, plus listed versions 1.1.1+ds-21.1.1+ds-2build1	None known
`darktable` Ubuntu:26.04:LTS	All versions, plus listed versions 5.0.1-25.2.1-15.2.1-1build15.2.1-1build25.4.0-15.4.1-1	None known
`emscripten` Ubuntu:26.04:LTS	All versions, plus listed versions 3.1.69+dfsg-33.1.69+dfsg-4	None known
`freedroidrpg` Ubuntu:26.04:LTS	All versions, plus listed versions 1.0-1build2	None known
`fs-uae` Ubuntu:26.04:LTS	All versions, plus listed versions 3.1.66-2build23.2.35-2	None known
`golly` Ubuntu:26.04:LTS	All versions, plus listed versions 3.3-1.1build33.3-1.1build4	None known
`goxel` Ubuntu:26.04:LTS	All versions, plus listed versions 0.11.0-1.1build30.11.0-1.1build4	None known
`naev` Ubuntu:26.04:LTS	All versions, plus listed versions 0.8.2-1build40.8.2-1build5	None known
`rust-lua52-sys` Ubuntu:26.04:LTS	All versions, plus listed versions 0.1.2-10.1.2-1build1	None known
`scite` Ubuntu:26.04:LTS	All versions, plus listed versions 5.5.6-15.5.7-15.5.8-2	None known
`scorched3d` Ubuntu:26.04:LTS	All versions, plus listed versions 44+dfsg-8build344+dfsg-8build4	None known
`tup` Ubuntu:26.04:LTS	All versions, plus listed versions 0.8-1build10.8-30.8-40.8-5	None known
`vifm` Ubuntu:26.04:LTS	All versions, plus listed versions 0.14-30.14.3-1	None known
`wcc` Ubuntu:26.04:LTS	All versions, plus listed versions 0.0.7+dfsg-20.0.7+dfsg-2build10.0.7+dfsg-2build2	None known
`widelands` Ubuntu:26.04:LTS	All versions, plus listed versions 2:1.2.1-32:1.2.1-42:1.2.1-4build12:1.3-12:1.3-22:1.3.1-3	None known
`lua55` openSUSE:Tumbleweed From an advisory covering 9 CVEs	before 5.5.0~beta1-1.1	5.5.0~beta1-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected
Nov 5, 2026	facts	OSV
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-43519 is a medium vulnerability (CVSS 5.5) in Lua, published November 9, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.23%, the 69th percentile. Fixed in ceph 18.2.2-3.

References

Show 33 moreShow less