Summary
It was discovered that an out-of-bounds read existed in LuaJIT. An
attacker could use this to cause a denial of service (application crash)
or possibly expose sensitive information. (CVE-2020-15890)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | luajit | 2.0.4+dfsg-1+deb9u1build0.16.04.1 |
Vulnerabilities 1
-
Unscored —
LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.
References
-
report
https://ubuntu.com/security/CVE-2020-15890