Medium ELSA-2019-3706 1 CVE

Moderate: lua security and bug fix update (Oracle Linux 8)

Published Nov 14, 2019 · Updated Nov 14, 2019

Ecosystem: Oracle Linux

Summary

[5.3.4-11]
- Fix use after free in lua_upvaluejoin (#1670167)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	lua	0:5.3.4-11.el8
Oracle Linux · 8	lua-devel	0:5.3.4-11.el8
Oracle Linux · 8	lua-libs	0:5.3.4-11.el8

Vulnerabilities 1

Unscored —

CVE-2019-6706 Public exploit EPSS 17%

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attac…

lua lua5.4 lua5.3 lua5.3 Debian Ubuntu Azure Linux Alpine

Jan 23, 2019