Описание
LuaJIT through 2.1.0-beta3 has an out-of-bounds read in lj_err_run in lj_err.c.
Отчет
OpenShift ServiceMesh (OSSM) does package a vulnerable version of luajit. However, a potential attacker would require enough privileges to be able to influence the envoy configuration to modify the lua rules in order to cause the out-of-bounds (OOB) read. Hence for OSSM the impact is low.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| OpenShift Service Mesh 1 | servicemesh-proxy | Affected |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
LuaJIT through 2.1.0-beta3 has an out-of-bounds read in lj_err_run in lj_err.c.
LuaJIT through 2.1.0-beta3 has an out-of-bounds read in lj_err_run in lj_err.c.
LuaJIT through 2.1.0-beta3 has an out-of-bounds read in lj_err_run in ...
LuaJIT through 2.1.0-beta3 has an out-of-bounds read in lj_err_run in lj_err.c.
ALT-PU-2016-1638: package `luajit` update to version 2.1-alt1
EPSS
7.5 High
CVSS3