Most recent entries from all

ALSA-2023:0957 — Moderate: lua security update

Affected: AlmaLinux:9: lua, AlmaLinux:9: lua-devel, AlmaLinux:9: lua-libs

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: use after free allows Sandbox Escape (CVE-2021-44964) * lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-01458

Withdrawn: BELL-CVE-2021-43519 — CVE-2021-43519 does not affect BellSoft software

Withdrawn by the publisher.

BIT-lua-2021-43519

Affected: Bitnami: lua

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

EUVD-2026-32491

fkie_cve-2021-43519

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

GHSA-g78p-3v3v-h7wm

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

gsd-2021-43519

msrc_CVE-2021-43519 — Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service vi…

msrc_CVE-2021-43519

openSUSE-SU-2024:12156-1 — liblua5_4-5-32bit-5.4.4-4.1 on GA media

liblua5_4-5-32bit-5.4.4-4.1 on GA media

RHSA-2023:1211 — Red Hat Security Advisory: lua security update

lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file lua: use after free allows Sandbox Escape

SCA-2025-0006 — Vulnerability affecting picoScan and multiScan

The multiScan and picoScan are vulnerable to a denial-of-service (DoS) attack. A remote attacker can exploit this vulnerability by conducting a Slowloris-type attack, causing the web page to become unresponsive. Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer underflow vulnerability (when the file is parsed), leading to elevation of privilege. Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the GenericReader::ParseNumber() function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer overflow vulnerability (when the file is parsed), leading to elevation of privilege. SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE. A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally all…

UBUNTU-CVE-2021-43519

Affected: Ubuntu:16.04:LTS: bam, Ubuntu:16.04:LTS: blobby, Ubuntu:16.04:LTS: darktable, Ubuntu:16.04:LTS: emscripten, Ubuntu:16.04:LTS: freedroidrpg, Ubuntu:16.04:LTS: fs-uae, Ubuntu:16.04:LTS: golly, Ubuntu:16.04:LTS: scite, Ubuntu:16.04:LTS: scorched3d, Ubuntu:16.04:LTS: tarantool and 100 more

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

WID-SEC-W-2022-1335 — Xerox FreeFlow Print Server: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.