Summary
It was discovered that LuaJIT incorrectly handled certain inputs. An attacker
could possibly use these issues to cause a crash, resulting in a denial of
service, or execute arbitrary code.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | luajit | 2.1.0~beta3+dfsg-6ubuntu0.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | luajit | 2.1.0+git20231223.c525bcb+dfsg-1ubuntu0.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | luajit | 2.0.2+dfsg-1ubuntu0.1~esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | luajit | 2.0.4+dfsg-1+deb9u1ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | luajit | 2.1.0~beta3+dfsg-5.1ubuntu0.18.04.1~esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | luajit | 2.1.0~beta3+dfsg-5.1ubuntu0.20.04.1~esm1 |
Vulnerabilities 3
-
Critical 9.8
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_str…
-
Critical 9.1
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler …
-
High 7.5
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which …