CVE-2021-44964

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows...

6.3 MediumFix available

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.98%Unchanged since Mar 15, 2022

What each source reports

NVD Score used 6.3

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

Record: CVE-2021-44964
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-416
Updated: 2026-11-02

CVE List No score

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

Record: CVE-2021-44964
Updated: 2026-11-02

EUVDEUVD-2021-31762 No score

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

Record: EUVD-2021-31762
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rvj2-9p3c-wmwh 6.3

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows...

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

Record: GHSA-rvj2-9p3c-wmwh
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
Weakness: CWE-416
Updated: 2026-11-02

OSVAZL-40979 6.3

CVE-2021-44964 affecting package ntopng for versions less than 5.2.1-6

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

Record: AZL-40979
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
Updated: 2026-11-05

OSVAZL-60034 6.3

CVE-2021-44964 affecting package ntopng for versions less than 5.2.1-3

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

Record: AZL-60034
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
Updated: 2026-11-02

Show 12 moreShow less

OSVAZL-60112 6.3

CVE-2021-44964 affecting package memcached for versions less than 1.6.22-2

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

Record: AZL-60112
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-9048 6.3

CVE-2021-44964 affecting package lua for versions less than 5.4.4-1

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

Record: AZL-9048
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
Updated: 2026-11-02

OSV 6.3

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

Record: CVE-2021-44964
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2021-44964 6.3

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

Record: DEBIAN-CVE-2021-44964
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
Updated: 2026-11-02

OSVJLSEC-2026-558 6.3

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

Record: JLSEC-2026-558
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

OSVOESA-2022-1860 6.3

lua security update

Lua is a powerful, efficient, lightweight, embeddable scripting language. It supports procedural programming, object-oriented programming, functional programming, data-driven programming, and data description.

Security Fix(es):

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.(CVE-2021-44964)

Record: OESA-2022-1860
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:0957 5.5

Red Hat Security Advisory: lua security update

Record: RHSA-2023:0957
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:1211 7.0

Red Hat Security Advisory: lua security update

Record: RHSA-2023:1211
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2023:0957 7.0

Moderate: lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

lua: use after free allows Sandbox Escape (CVE-2021-44964)
lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2023:0957
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2021-44964 6.3

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

Record: UBUNTU-CVE-2021-44964
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
Updated: 2026-11-06

OSVALSA-2023:0957 No score

Moderate: lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

lua: use after free allows Sandbox Escape (CVE-2021-44964)
lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2023:0957
Updated: 2026-11-02

OSVBIT-lua-2021-44964 No score

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

Record: BIT-lua-2021-44964
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`lua` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.4.4-2.el9_1	5.4.4-2.el9_1
`lua-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.4.4-2.el9_1	5.4.4-2.el9_1
`lua-libs` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.4.4-2.el9_1	5.4.4-2.el9_1
`ntopng` Azure Linux:3	before 5.2.1-6	5.2.1-6
`ntopng` Azure Linux:2	before 5.2.1-3	5.2.1-3
`memcached` Azure Linux:2	before 1.6.22-2	1.6.22-2
`lua` Azure Linux:2	before 5.4.4-1	5.4.4-1
`lua` Bitnami	5.4.0 up to 5.4.4	5.4.4
`lua5.4` Debian:12	before 5.4.4-1	5.4.4-1
`lua5.4` Debian:13	before 5.4.4-1	5.4.4-1

Show 35 moreShow less

Affected packages
Package	Affected	Fixed
`lua5.4` Debian:14	before 5.4.4-1	5.4.4-1
`Lua_jll` Julia	5.4.3+0 up to 5.4.4+0	5.4.4+0
`lua` openEuler:22.03-LTS	before 5.4.3-8.oe2203	5.4.3-8.oe2203
`lua` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-libs-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua` Red Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-debugsource` Red Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-libs` Red Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-libs-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-debugsource` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-devel` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua-libs-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-debugsource` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-libs-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua` Red Hat:rhel_eus:9.0::baseos From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-debuginfo` Red Hat:rhel_eus:9.0::baseos From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-debugsource` Red Hat:rhel_eus:9.0::baseos From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-libs` Red Hat:rhel_eus:9.0::baseos From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-libs-debuginfo` Red Hat:rhel_eus:9.0::baseos From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua` Red Hat:rhel_eus:9.0::crb From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-debugsource` Red Hat:rhel_eus:9.0::crb From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-devel` Red Hat:rhel_eus:9.0::crb From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua-libs-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 2 CVEs	before 0:5.4.4-1.el9_0.1	0:5.4.4-1.el9_0.1
`lua` Rocky Linux:9 From an advisory covering 2 CVEs	before 0:5.4.4-2.el9_1	0:5.4.4-2.el9_1
`lua5.2` Ubuntu:14.04:LTS	All versions, plus listed versions 5.2.2-15.2.2-25.2.2-35.2.3-1	None known
`lua5.2` Ubuntu:16.04:LTS	All versions, plus listed versions 5.2.4-15.2.4-1ubuntu1	None known
`lua5.3` Ubuntu:16.04:LTS	All versions, plus listed versions 5.3.1-15.3.1-1ubuntu25.3.1-1ubuntu2.1	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected
Nov 5, 2026	facts	OSV
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-44964 is a medium vulnerability (CVSS 6.3) in Lua, published March 14, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.98%, the 62nd percentile. Fixed in ntopng 5.2.1-6.

References

Show 21 moreShow less