CVE-2022-33099

Katalog CVE

CVSS 7.5 · High EPSS 2,8%

Kerentanan Out-of-bounds Write pada lua, fedoraproject fedora. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.

Rincian

Terbit di NVD

1 Juli 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

2,8% peluang dieksploitasi; lebih tinggi dari 86,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lua-users.org/lists/lua-l/2022-05/msg00035.html exploit · mailing list · advisory vendor
• https://lua-users.org/lists/lua-l/2022-05/msg00042.html exploit · mailing list · advisory vendor
• https://lua-users.org/lists/lua-l/2022-05/msg00073.html exploit · mailing list · advisory vendor
• https://github.com/lua/lua/commit/42d40581dd919fb134c07027ca1ce0844c670daf patch · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJNJ66IFDUKWJ...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHYZOEFDVLVAD...
• https://www.lua.org/bugs.html#Lua-stack%20overflow%20when%20C%20stack%20overflows%20while%20handling%20an%20er...