CVE-2024-25178

Опубликовано: 07 июл. 2025

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

Ссылки

https://gist.github.com/pwnhacker0x18/423b4292f301ab274b42d5ed6e0b87d8
Third Party Advisory
https://github.com/LuaJIT/LuaJIT/commit/defe61a56751a0db5f00ff3ab7b8f45436ba74c8
Patch
https://github.com/LuaJIT/LuaJIT/issues/1152
Exploit
Issue Tracking
https://github.com/openresty/luajit2/commit/defe61a56751a0db5f00ff3ab7b8f45436ba74c8
https://lists.debian.org/debian-lts-announce/2025/08/msg00022.html
https://github.com/LuaJIT/LuaJIT/issues/1152
Exploit
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:luajit:luajit:*:*:*:*:*:*:*:*

Версия до 2.1.0 (включая)

EPSS

Процентиль: 43%

0.00541

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2024-25178

CVSS3: 9.1

ubuntu

около 1 года назад

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

CVE-2024-25178

CVSS3: 1.9

redhat

около 1 года назад

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

CVE-2024-25178

CVSS3: 9.1

msrc

около 1 года назад

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

CVE-2024-25178

CVSS3: 9.1

debian

около 1 года назад

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an ...

GHSA-vw7w-mrf6-7vrv

CVSS3: 9.1

github

около 1 года назад

LuaJIT through 2.1 has an out-of-bounds read in the stack-overflow handler in lj_state.c

EPSS

Процентиль: 43%

0.00541

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-125