PT-2023-12563 · Lua+1 · Lua+1

·

CVE-2021-45985

·

Publicado

2021-12-06

·

Atualizado

2025-04-25

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Lua version 5.4.3
Description The issue is related to an erroneous finalizer called during a tail call, leading to a heap-based buffer over-read in Lua 5.4.3.
Recommendations For Lua version 5.4.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

AZL-26047
AZL-26155
AZL-26158
AZL-35066
BDU:2026-08975
BIT-LUA-2021-45985
CVE-2021-45985
OESA-2023-1241
OESA-2023-1242

Produtos afetados

Debian
Lua