Lua vulnerabilities

Products

• Lua 15

Newest

• lua In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over... CVE-2021-45985 Fix available 7.5 HighApril 10, 2023
• lua, fedoraproject fedora +1 more An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow... CVE-2022-33099 Fix available 7.5 HighJuly 1, 2022
• lua, fedoraproject fedora +1 more singlevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a... CVE-2022-28805 Fix available 9.1 CriticalApril 8, 2022
• lua Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows... CVE-2021-44964 Fix available 6.3 MediumMarch 14, 2022
• lua, fedoraproject fedora +1 more Lua 5.4.4 and 5.4.2 are affected by SEGV by type confusion in funcnamefromcode function in ldebug... CVE-2021-44647 Fix available 5.5 MediumJanuary 11, 2022
• lua, fedoraproject fedora +1 more Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform... CVE-2021-43519 Fix available 5.5 MediumNovember 9, 2021
• lua ldebug.c in Lua 5.4.0 attempts to access debug information via the line hook of a stripped... CVE-2020-24369 Fix available 7.5 HighAugust 17, 2020
• lua lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a... CVE-2020-24371 Fix available 5.3 MediumAugust 17, 2020
• lua, debian linux, fedoraproject fedora +2 more ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal,... CVE-2020-24370 Public exploitFix available 5.3 MediumAugust 17, 2020
• lua, fedoraproject fedora +1 more Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection... CVE-2020-24342 Fix available 7.8 HighAugust 13, 2020
• lua Lua through 5.4.0 has a segmentation fault in changedline in ldebug.c (e.g., when called by... CVE-2020-15945 Fix available 5.5 MediumJuly 24, 2020
• lua Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection,... CVE-2020-15888 Fix available 8.8 HighJuly 21, 2020
• lua Lua through 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c... CVE-2020-15889 Fix available 9.8 CriticalJuly 21, 2020
• lua, canonical ubuntu linux +1 more Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might... CVE-2019-6706 Public exploitFix available EPSS 17.4% 7.5 HighJanuary 23, 2019
• lua, canonical ubuntu linux, debian linux +2 more +4 more Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows... CVE-2014-5461 Fix available EPSS 12.0% 5.0 MediumAugust 28, 2014