Red Hat Security AdvisoryRHSA-2023:0957
lua security update
Released 2023-02-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) lua-5.4.4-2.el9_1, lua-devel-5.4.4-2.el9_1
- Red Hat Enterprise Linux AppStream (v. 9) lua-5.4.4-2.el9_1
- Red Hat Enterprise Linux BaseOS (v. 9) lua-5.4.4-2.el9_1, lua-libs-5.4.4-2.el9_1
Fixes 2 records
Priority LOW 30
Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.
CVSS 3.1MEDIUM 6.3· Local · No auth · User interaction · EPSS 0.00985 · Published 2022-03-14 · Fixed CWE-416
Priority LOW 27
Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01227 · Published 2021-11-09 · Partial fix CWE-674
