Back to bug 2185579

Who When What Removed Added
Avinash Hanwate 2023-04-10 11:20:28 UTC Blocks 2185580
Avinash Hanwate 2023-04-10 11:21:04 UTC CC mschmidt, packaging-team-maint
TEJ RATHI 2023-04-12 14:33:44 UTC CC bdettelb, caswilli, dffrench, fjansen, gzaronik, hbraun, jburrell, jkoehler, kaycoth, ngough, rgodfrey, sthirugn, tmeszaro, vkrizan
TEJ RATHI 2023-04-14 06:31:58 UTC Fixed In Version Lua 5.4.4
TEJ RATHI 2023-04-14 06:43:33 UTC Doc Text A heap-based buffer overflow issue was discovered in Lua Interpreter. The vulnerability can be exploited when an erroneous finalizer called during a tail call with an invalid stack, triggering an out-of-bounds read, leading to a crash or a denial of service.
RaTasha Tillery-Smith 2023-04-14 13:42:13 UTC Doc Text A heap-based buffer overflow issue was discovered in Lua Interpreter. The vulnerability can be exploited when an erroneous finalizer called during a tail call with an invalid stack, triggering an out-of-bounds read, leading to a crash or a denial of service. A heap-based buffer overflow issue was found in Lua Interpreter. The vulnerability can be exploited when an erroneous finalizer calls during a tail call with an invalid stack, triggering an out-of-bounds read, leading to a crash or a denial of service.
Red Hat Bugzilla 2023-07-07 08:29:03 UTC Assignee security-response-team nobody

Back to bug 2185579