CVE-2021-45985

Опубликовано: 10 апр. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.

Ссылки

http://lua-users.org/lists/lua-l/2021-12/msg00019.html
Exploit
Mailing List
Vendor Advisory
https://github.com/lua/lua/commit/cf613cdc6fa367257fc61c256f63d917350858b5
Patch
https://www.lua.org/bugs.html#5.4.3-11
Vendor Advisory
http://lua-users.org/lists/lua-l/2021-12/msg00019.html
Exploit
Mailing List
Vendor Advisory
https://github.com/lua/lua/commit/cf613cdc6fa367257fc61c256f63d917350858b5
Patch
https://www.lua.org/bugs.html#5.4.3-11
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lua:lua:*:*:*:*:*:*:*:*

Версия от 5.4.0 (включая) до 5.4.4 (исключая)

EPSS

Процентиль: 44%

0.0021

Низкий

7.5 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVE-2021-45985

CVSS3: 7.5

ubuntu

около 2 лет назад

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.

CVE-2021-45985

CVSS3: 7.5

redhat

около 2 лет назад

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.

CVE-2021-45985

CVSS3: 5.5

msrc

5 месяцев назад

Mitre: CVE-2021-45985 Erroneous finalizer call in Lua leads to a heap-based buffer over-read

CVE-2021-45985

CVSS3: 7.5

debian

около 2 лет назад

In Lua 5.4.3, an erroneous finalizer called during a tail call leads t ...

GHSA-pxvf-cp3x-784h

CVSS3: 7.5

github

около 2 лет назад

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.

EPSS

Процентиль: 44%

0.0021

Низкий

7.5 High

CVSS3

Дефекты

CWE-787