Search for packages
| purl | pkg:conan/lua@5.4.0 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-9hw6-zjwq-83gr
Aliases: CVE-2021-43519 |
denial of service |
Affected by 1 other vulnerability. |
|
VCID-genu-xfqb-ryfk
Aliases: CVE-2022-28805 |
Out-of-bounds Read singlevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code. | There are no reported fixed by versions. |
|
VCID-k38z-6c33-vueb
Aliases: CVE-2020-15945 |
Buffer Overflow Lua has a segmentation fault in `changedline` in `ldebug.c` (e.g., when called by `luaG_traceexec`) because it incorrectly expects that an `oldpc` value is always updated upon a return of the flow of control to a function. |
Affected by 0 other vulnerabilities. |
|
VCID-n4rj-yf2u-j7fe
Aliases: CVE-2020-24342 |
Improper Restriction of Operations within the Bounds of a Memory Buffer Lua through allows a stack redzone cross in `luaO_pushvfstring` because a protection mechanism wrongly calls `luaD_callnoyield` twice in a row. |
Affected by 0 other vulnerabilities. |
|
VCID-n66m-4kp4-a7ef
Aliases: CVE-2020-24369 |
NULL Pointer Dereference `ldebug.c` attempts to access debug information via the line hook of a stripped function, leading to a NULL pointer dereference. | There are no reported fixed by versions. |
|
VCID-pdpa-5dks-u7a9
Aliases: CVE-2021-44964 |
Use After Free Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file. |
Affected by 1 other vulnerability. |
|
VCID-qp4c-jwam-nub9
Aliases: CVE-2020-24371 |
Release of Invalid Pointer or Reference `lgc.c` mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving `collectgarbage`. | There are no reported fixed by versions. |
|
VCID-s7du-gace-j3ev
Aliases: CVE-2020-15888 |
arbitrary code execution |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-t3vr-j6vw-33db
Aliases: CVE-2020-15889 |
arbitrary code execution |
Affected by 0 other vulnerabilities. |
|
VCID-ute6-ecyg-9ffz
Aliases: CVE-2020-24370 |
Integer Underflow (Wrap or Wraparound) `ldebug.c` allows a negation overflow and segmentation fault in `getlocal` and `setlocal`. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||