Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-25177

Опубликовано: 07 июл. 2025
Источник: redhat
CVSS3: 1.9
EPSS Низкий

Описание

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).

An out-of-bounds read was found in LuaJIT. This issue was uncovered through fuzzing, and no real-world exploit has been demonstrated.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenStack Platform 17.1luajitFix deferred
Red Hat OpenStack Platform 18.0luajitFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=2376881luajit: Out of bounds read in LuaJIT

EPSS

Процентиль: 37%
0.00455
Низкий

1.9 Low

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 1 года назад

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).

CVSS3: 7.5
nvd
около 1 года назад

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).

CVSS3: 7.5
msrc
12 месяцев назад

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).

CVSS3: 7.5
debian
около 1 года назад

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an ...

CVSS3: 7.5
github
около 1 года назад

LuaJIT through 2.1 has an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).

EPSS

Процентиль: 37%
0.00455
Низкий

1.9 Low

CVSS3