REDHAT-BUG-2073884: Low severity Lua Lua vulnerability
singlevar in lparser.c in Lua through 5.4.4 lacks a certain luaKexp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.
https://lua-users.org/lists/lua-l/2022-02/msg00001.html https://lua-users.org/lists/lua-l/2022-02/msg00070.html https://lua-users.org/lists/lua-l/2022-04/msg00009.html https://github.com/lua/lua/commit/1f3c6f4534c6411313361697d98d1145a1f030fa
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Systems using Lua through 5.4.4 may be affected if they compile Lua code supplied by an untrusted party. Deployments that do not compile untrusted Lua code are not identified as affected by the available information.
What must an attacker be able to do to trigger the flaw?
An attacker needs the ability to provide Lua source code that the affected system compiles. The issue occurs during compilation and can cause a heap-based buffer over-read.