Описание
In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| lua5.4 | fixed | 5.4.4-1 | package | |
| lua5.4 | no-dsa | bullseye | package | |
| lua5.3 | not-affected | package | ||
| lua5.2 | not-affected | package | ||
| lua5.1 | not-affected | package | ||
| lua50 | not-affected | package |
Примечания
https://www.lua.org/bugs.html#5.4.3-11
https://github.com/lua/lua/commit/cf613cdc6fa367257fc61c256f63d917350858b5 (v5.4.4)
http://lua-users.org/lists/lua-l/2021-12/msg00019.html
Связанные уязвимости
In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.
In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.
In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.
Mitre: CVE-2021-45985 Erroneous finalizer call in Lua leads to a heap-based buffer over-read
In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.