CVE-2020-24370

Опубликовано: 17 авг. 2020

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31).

Ссылки

http://lua-users.org/lists/lua-l/2020-07/msg00324.html
Exploit
Mailing List
Vendor Advisory
https://github.com/lua/lua/commit/a585eae6e7ada1ca9271607a4f48dfb17868ab7b
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/09/msg00019.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/06/msg00031.html
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6KONNG6UEI3FMEOY67NDZC32NBGBI44/
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXYMCIUNGK26VHAYHGP5LPW56G2KWOHQ/
Third Party Advisory
http://lua-users.org/lists/lua-l/2020-07/msg00324.html
Exploit
Mailing List
Vendor Advisory
https://github.com/lua/lua/commit/a585eae6e7ada1ca9271607a4f48dfb17868ab7b
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/09/msg00019.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/06/msg00031.html
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6KONNG6UEI3FMEOY67NDZC32NBGBI44/
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXYMCIUNGK26VHAYHGP5LPW56G2KWOHQ/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:lua:lua:5.2.0:-:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.2.0:alpha:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.2.0:beta:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.2.2:*:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.2.3:*:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.3.0:-:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.3.0:alpha:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.3.0:beta:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.3.1:*:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.3.2:*:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.3.3:*:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.3.4:*:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.3.5:*:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.4.0:-:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.4.0:alpha:*:*:*:*:*:*

cpe:2.3:a:lua:lua:5.4.0:beta:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02705

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-191

Связанные уязвимости

CVE-2020-24370

CVSS3: 5.3

ubuntu

почти 5 лет назад

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31).

CVE-2020-24370

CVSS3: 5.3

redhat

почти 5 лет назад

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31).

CVE-2020-24370

CVSS3: 5.3

msrc

12 месяцев назад

Описание отсутствует

CVE-2020-24370

CVSS3: 5.3

debian

почти 5 лет назад

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation faul ...

RLSA-2021:4510

rocky

больше 3 лет назад

Low: lua security update

EPSS

Процентиль: 85%

0.02705

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-191