Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-15889

Опубликовано: 21 июл. 2020
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 7.5
CVSS3: 9.8

Описание

Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members.

РелизСтатусПримечание
bionic

not-affected

devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-infra-legacy/trusty

not-affected

esm-infra/xenial

not-affected

focal

not-affected

precise/esm

not-affected

trusty

ignored

end of standard support
trusty/esm

not-affected

Показывать по

РелизСтатусПримечание
bionic

not-affected

devel

not-affected

esm-infra-legacy/trusty

not-affected

esm-infra/bionic

not-affected

esm-infra/focal

not-affected

esm-infra/xenial

not-affected

focal

not-affected

precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

not-affected

Показывать по

РелизСтатусПримечание
bionic

not-affected

devel

not-affected

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

esm-infra/focal

not-affected

esm-infra/xenial

not-affected

focal

not-affected

precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

5.4.0-2
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

upstream

needs-triage

xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/xenial

not-affected

esm-infra-legacy/trusty

DNE

focal

not-affected

precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

Показывать по

EPSS

Процентиль: 66%
0.0051
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 8.1
redhat
больше 5 лет назад

Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members.

CVSS3: 9.8
nvd
больше 5 лет назад

Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members.

CVSS3: 9.8
msrc
больше 5 лет назад

Описание отсутствует

CVSS3: 9.8
debian
больше 5 лет назад

Lua 5.4.0 has a getobjname heap-based buffer over-read because youngco ...

github
больше 3 лет назад

Lua through 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members.

EPSS

Процентиль: 66%
0.0051
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Уязвимость CVE-2020-15889