Most recent entries from all

ALSA-2023:0957 — Moderate: lua security update

Affected: AlmaLinux:9: lua, AlmaLinux:9: lua-devel, AlmaLinux:9: lua-libs

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: use after free allows Sandbox Escape (CVE-2021-44964) * lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BIT-lua-2021-44964

Affected: Bitnami: lua

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2025-avi-0969

EUVD-2026-33135

fkie_cve-2021-44964

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

GHSA-rvj2-9p3c-wmwh

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

gsd-2021-44964

msrc_CVE-2021-44964 — Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform S…

msrc_CVE-2021-44964

OESA-2022-1860 — lua security update

Affected: openEuler:22.03-LTS: lua

Lua is a powerful, efficient, lightweight, embeddable scripting language. It supports procedural programming, object-oriented programming, functional programming, data-driven programming, and data description. Security Fix(es): Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.(CVE-2021-44964)

RHSA-2023:0957 — Red Hat Security Advisory: lua security update

lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file lua: use after free allows Sandbox Escape

RHSA-2023:1211 — Red Hat Security Advisory: lua security update

lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file lua: use after free allows Sandbox Escape

UBUNTU-CVE-2021-44964

Affected: Ubuntu:14.04:LTS: lua5.2, Ubuntu:16.04:LTS: lua50, Ubuntu:16.04:LTS: lua5.2, Ubuntu:16.04:LTS: lua5.3, Ubuntu:18.04:LTS: lua50, Ubuntu:20.04:LTS: lua50

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

WID-SEC-W-2023-0522 — Red Hat Enterprise Linux (lua): Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.