CVE-2020-24371: Medium severity lua lpeg vulnerability
Published Aug 17, 2020
·Updated
lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage.
Affected Software
2 affected componentsFixes available
Lua Lua=5.4.0
Microsoft azl3 ceph 18.2.2-3
Remediation
Patch Available
Event History
Aug 17, 2020
CVE Published
via MITRE·04:06 PM
Data Sourced
via MITRE·04:06 PM
Description
Sep 3, 2025
Data Sourced
via Microsoft·10:25 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·10:25 PM
Affected Software
Updated
via Microsoft·10:25 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2020-24371?
CVE-2020-24371 is a vulnerability that affects Lua 5.4.0 and involves a memory access violation during the collectgarbage process.
2
What software versions are affected by CVE-2020-24371?
CVE-2020-24371 affects Lua 5.4.0.
3
What is the severity of CVE-2020-24371?
The severity of CVE-2020-24371 is medium with a severity value of 5.3.
4
How does CVE-2020-24371 occur?
CVE-2020-24371 occurs due to mishandling of the interaction between barriers and the sweep phase in Lua 5.4.0.
5
How can I fix CVE-2020-24371?
To fix CVE-2020-24371, update to a patched version of Lua 5.4.0 or a newer version that addresses the vulnerability.