An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.
{ "vanir_signatures": [ { "id": "CVE-2022-33099-130d0ed2", "source": "https://github.com/lua/lua/commit/42d40581dd919fb134c07027ca1ce0844c670daf", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "47064890593937786897531178058191810844", "332134119330750700401512169069853671896", "265513752968495196327410634712261241495", "4686135018978641772480404961188955158", "191357327930270353914184361696403200245" ] }, "target": { "file": "ldebug.c" } }, { "id": "CVE-2022-33099-422ac859", "source": "https://github.com/lua/lua/commit/42d40581dd919fb134c07027ca1ce0844c670daf", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "238664278947635791321220985534781971204", "110587412781719742331913145596387590167", "122377330859284596425482454709373106670", "41978752855376686284244150713173810101", "244764617910085233208160284415443226461", "237849260543562680110344945870625485769", "37562800747512701822999390229154263700", "219524848240838254345629611037116750206", "108725855737991599988774000492808822080" ] }, "target": { "file": "lvm.c" } }, { "id": "CVE-2022-33099-a6a7014b", "source": "https://github.com/lua/lua/commit/42d40581dd919fb134c07027ca1ce0844c670daf", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 1148.0, "function_hash": "144187715496695041250959146983441313261" }, "target": { "file": "lvm.c", "function": "luaV_concat" } }, { "id": "CVE-2022-33099-e7e66be7", "source": "https://github.com/lua/lua/commit/42d40581dd919fb134c07027ca1ce0844c670daf", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 358.0, "function_hash": "281541209982265951639218471101078983413" }, "target": { "file": "ldebug.c", "function": "luaG_runerror" } } ] }