Описание
LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| luajit | fixed | 2.1.0~beta3+git20210112+dfsg-2 | package |
Примечания
https://github.com/LuaJIT/LuaJIT/issues/601
https://github.com/LuaJIT/LuaJIT/commit/53f82e6e2e858a0a62fd1a2ff47e9866693382e6
No security impact, only "exploitable" with untrusted Lua code
Связанные уязвимости
LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.
LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.
LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.
LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.
Уязвимость функции static ptrdiff_t finderrfunc из src/lj_err.c компилятора LuaJIT языка программированя Lua, позволяющая нарушителю вызвать отказ в обслуживании