Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service.
References
Link | Resource |
---|---|
http://lua-users.org/lists/lua-l/2021-11/msg00204.html | Mailing List Patch Vendor Advisory |
http://lua-users.org/lists/lua-l/2021-11/msg00195.html | Exploit Mailing List Vendor Advisory |
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3EMGAQ5Y6GXJLY4K5DUOOEQT4MZ4J4F/ | Mailing List Third Party Advisory |
https://access.redhat.com/security/cve/cve-2021-44647 | Third Party Advisory |
Information
Published : 2022-01-11 05:15
Updated : 2022-05-13 08:52
NVD link : CVE-2021-44647
Mitre link : CVE-2021-44647
JSON object : View
CWE
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')
Products Affected
lua
- lua
fedoraproject
- fedora