5

CVE-2014-5461

Exploit

Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments.

Data is provided by the National Vulnerability Database (NVD)
Opensuse ≫ Opensuse Version12.3
Opensuse ≫ Opensuse Version13.1
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Debian ≫ Debian Linux Version7.0
Lua ≫ Lua Version5.1
Lua ≫ Lua Version5.1.1
Lua ≫ Lua Version5.1.2
Lua ≫ Lua Version5.1.3
Lua ≫ Lua Version5.1.4
Lua ≫ Lua Version5.1.5
Lua ≫ Lua Version5.2.0
Lua ≫ Lua Version5.2.1
Lua ≫ Lua Version5.2.2
Mageia ≫ Mageia Version3.0
Mageia ≫ Mageia Version4.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 18.47% 0.95
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.openwall.com/lists/oss-security/2014/08/21/1
Patch
Third Party Advisory
Exploit
Mailing List
http://www.openwall.com/lists/oss-security/2014/08/21/4
Patch
Third Party Advisory
Exploit
Mailing List
http://www.securityfocus.com/bid/69342
Third Party Advisory
VDB Entry