CVE-2020-24369: Null Pointer Dereference
Published Aug 17, 2020
·Updated
ldebug.c in Lua 5.4.0 attempts to access debug information via the line hook of a stripped function, leading to a NULL pointer dereference.
Affected Software
1 affected component
Lua LPeg=5.4.0
Remediation
Event History
Aug 17, 2020
CVE Published
via MITRE·04:06 PM
Data Sourced
via MITRE·04:06 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-24369.
2
What is the severity level of CVE-2020-24369?
The severity level of CVE-2020-24369 is high (7.5).
3
Which software versions are affected by CVE-2020-24369?
The affected software version for CVE-2020-24369 is Lua 5.4.0.
4
How can this vulnerability be exploited?
This vulnerability can be exploited by attempting to access debug information via the line hook of a stripped function, leading to a NULL pointer dereference.
5
Is there a fix available for CVE-2020-24369?
Yes, a fix is available for CVE-2020-24369. It can be found in the official Lua source code repository.