Home

CVE-2014-5461

Description

Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
21.592

Associated Vulnerability

VulnerabilityOS Platform
Simple, extensible, embeddable programming language (USN-2338-1) lua5.1_5.1.5-5ubuntu0.1_i386.debLinux
Simple, extensible, embeddable programming language (USN-2338-1) lua5.1_5.1.5-5ubuntu0.1_amd64.debLinux
Simple, extensible, embeddable programming language (USN-2338-1) lua5.1_5.1.4-12ubuntu1.1_i386.debLinux
Simple, extensible, embeddable programming language (USN-2338-1) lua5.1_5.1.4-12ubuntu1.1_amd64.debLinux
Simple, extensible, embeddable programming language (USN-2338-1) liblua5.1-0_5.1.5-5ubuntu0.1_i386.debLinux
Simple, extensible, embeddable programming language (USN-2338-1) liblua5.1-0_5.1.5-5ubuntu0.1_amd64.debLinux
Simple, extensible, embeddable programming language (USN-2338-1) liblua5.1-0_5.1.4-12ubuntu1.1_i386.debLinux
Simple, extensible, embeddable programming language (USN-2338-1) liblua5.1-0_5.1.4-12ubuntu1.1_amd64.debLinux
lua5.1 security update(DSA-3015-1) lua5.1_5.1.5-4+deb7u1_i386.debLinux
lua5.2 security update(DSA-3016-1) lua5.2_5.2.3-1.1_i386.debLinux
lua5.2 security update(DSA-3016-1) lua5.2_5.2.3-1.1_amd64.debLinux
lua5.2 security update(DSA-3016-1) lua5.2_5.2.3-1.1_kfreebsd-i386.debLinux
lua5.2 security update(DSA-3016-1) lua5.2_5.2.3-1.1_kfreebsd-amd64.debLinux
lua5.2 security update(DSA-3016-1) lua5.2_5.2.1-3+deb7u1_i386.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234