Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-25178

Опубликовано: 07 июл. 2025
Источник: redhat
CVSS3: 1.9
EPSS Низкий

Описание

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

An out-of-bounds read was found in LuaJIT. This issue was uncovered through fuzzing, and no real-world exploit has been demonstrated.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenStack Platform 17.1luajitFix deferred
Red Hat OpenStack Platform 18.0luajitFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=2376880luajit: Out of bounds read in LuaJIT

EPSS

Процентиль: 32%
0.00123
Низкий

1.9 Low

CVSS3

Связанные уязвимости

CVSS3: 9.1
ubuntu
7 месяцев назад

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

CVSS3: 9.1
nvd
7 месяцев назад

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

CVSS3: 9.1
msrc
7 месяцев назад

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

CVSS3: 9.1
debian
7 месяцев назад

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an ...

CVSS3: 9.1
github
7 месяцев назад

LuaJIT through 2.1 has an out-of-bounds read in the stack-overflow handler in lj_state.c

EPSS

Процентиль: 32%
0.00123
Низкий

1.9 Low

CVSS3