Summary
It was discovered that Lua incorrectly handled certain vararg functions
with a large number of fixed parameters. An attacker could use this issue
to cause Lua applications to crash, resulting in a denial of service, or
possibly execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | lua5.1 | 5.1.5-5ubuntu0.1 |
Vulnerabilities 1
-
Unscored —CVE-2014-5461 EPSS 12%
Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attacke…
References
-
report
https://ubuntu.com/security/CVE-2014-5461