Unscored USN-3941-1 1 CVE

lua5.3 vulnerability

Published Apr 8, 2019 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Fady Othman discovered that Lua incorrectly handled certain scripts.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	lua5.3	5.3.1-1ubuntu2.1
Ubuntu · 18.04 LTS 18.04:LTS	lua5.3	5.3.3-1ubuntu0.18.04.1

Vulnerabilities 1

Unscored —

CVE-2019-6706 Public exploit EPSS 17%

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attac…

lua lua5.4 lua5.3 lua5.3 Debian Ubuntu Azure Linux Alpine

Jan 23, 2019

References

report
https://ubuntu.com/security/CVE-2019-6706