BIT-lua-2020-24370

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/lua/BIT-lua-2020-24370.json
JSON Data
https://api.test.osv.dev/v1/vulns/BIT-lua-2020-24370
Aliases
Published
2024-03-06T10:56:50.799Z
Modified
2025-04-03T14:40:37.652Z
Summary
[none]
Details

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31).

Database specific 
{
    "cpes": [
        "cpe:2.3:a:lua:lua:5.4.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.2.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.2.0:alpha:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.2.0:beta:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.2.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.2.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.3.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.3.0:alpha:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.3.0:beta:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.3.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.3.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.3.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.3.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.3.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.4.0:alpha:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.4.0:beta:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:*:*:*:*:*:*:*:*"
    ],
    "severity": "Medium"
}
References

Affected packages

Bitnami / lua

Package

Name
lua
Purl
pkg:bitnami/lua

Severity

  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
5.2.0-alpha
Fixed
5.2.0
Introduced
5.2.0-beta
Fixed
5.2.0
Introduced
5.2.0
Fixed
5.2.1
Introduced
5.2.1
Fixed
5.2.2
Introduced
5.2.2
Fixed
5.2.3
Introduced
5.2.3
Fixed
5.2.4
Introduced
5.3.0-alpha
Fixed
5.3.0
Introduced
5.3.0-beta
Fixed
5.3.0
Introduced
5.3.0
Fixed
5.3.1
Introduced
5.3.1
Fixed
5.3.2
Introduced
5.3.2
Fixed
5.3.3
Introduced
5.3.3
Fixed
5.3.4
Introduced
5.3.4
Fixed
5.3.5
Introduced
5.3.5
Fixed
5.3.6
Introduced
5.4.0-alpha
Fixed
5.4.0
Introduced
5.4.0-beta
Fixed
5.4.0
Introduced
5.4.0
Fixed
5.4.1