CVE-2020-24370

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-24370
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-24370.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-24370
Aliases
Downstream
Related
Published
2020-08-17T17:15:13.877Z
Modified
2026-05-14T04:04:00.571687029Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
[none]
Details

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31).

Database specific 
{
    "unresolved_ranges": [
        {
            "cpe": "cpe:2.3:a:lua:lua:5.2.0:alpha:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "5.2.0-alpha"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:lua:lua:5.2.0:beta:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "5.2.0-beta"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:lua:lua:5.3.0:alpha:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "5.3.0-alpha"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "5.3.0-beta"
                }
            ],
            "cpe": "cpe:2.3:a:lua:lua:5.3.0:beta:*:*:*:*:*:*",
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:lua:lua:5.4.0:alpha:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "5.4.0-alpha"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:lua:lua:5.4.0:beta:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "5.4.0-beta"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "9.0"
                }
            ],
            "cpe": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "31"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "32"
                }
            ],
            "source": "CPE_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/lua/lua

Affected ranges

Type
GIT
Repo
https://github.com/lua/lua
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e2fc2ce8dfe107d1e2742b459c2aaf137227bbc1
Last affected
78d986590060b615334ac214b6cc5b7d951b1d58
Last affected
c8e96d6e91dc2e3d5b175cc4cd811398ab35c82d
Last affected
7ea44b56a883857dc7ba28bd99406491034e254c
Last affected
3c55790ebee7148281cd00f44aa293e456b4da6d
Last affected
a1415c0d72053cf6f6f7e68033fa3b7f999ad960
Last affected
c25d59a6bdbc6f587310159a1975b399ad8dd079
Last affected
aa66ca76ce10db054e34de8a19a48d0beb5eb7a6
Last affected
e354c6355e7f48e087678ec49e340ca0696725b1
Last affected
063d4e4543088e7a21965bda8ee5a0f952a9029e
Last affected
c33b1728aeb7dfeec4013562660e07d32697aa6b
Database specific 
{
    "cpe": [
        "cpe:2.3:a:lua:lua:5.2.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.2.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.2.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.3.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.3.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.3.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.3.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.3.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.3.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:lua:lua:5.4.0:-:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.2.0-NA"
        },
        {
            "last_affected": "5.2.1"
        },
        {
            "last_affected": "5.2.2"
        },
        {
            "last_affected": "5.2.3"
        },
        {
            "last_affected": "5.3.0-NA"
        },
        {
            "last_affected": "5.3.1"
        },
        {
            "last_affected": "5.3.2"
        },
        {
            "last_affected": "5.3.3"
        },
        {
            "last_affected": "5.3.4"
        },
        {
            "last_affected": "5.3.5"
        },
        {
            "last_affected": "5.4.0-NA"
        }
    ],
    "source": "CPE_FIELD"
}

Affected versions

v1.*
v1.2
v2.*
v2.1
v2.2
v2.3-beta
v2.4
v2.4-beta
v2.5
v2.5-beta
v2.5.1
v3.*
v3.0
v3.0-alpha
v3.1
v3.1-alpha
v3.2
v3.2-beta
v4.*
v4.0
v4.0-alpha
v4.0-beta
v4.1-alpha
v5.*
v5.0
v5.0-alpha
v5.0-beta
v5.1
v5.1-alpha
v5.1-beta
v5.1.1
v5.2-alpha
v5.2-beta
v5.2.0
v5.2.1
v5.2.2
v5.2.3
v5.3-alpha
v5.3-beta
v5.3.0
v5.3.1
v5.3.2
v5.3.3
v5.3.4
v5.3.5
v5.4-alpha
v5.4-beta
v5.4-w2
v5.4.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-24370.json"