CVE-2021-44647 : Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode

Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service.

Published 2022-01-11 13:15:08

Updated 2023-05-03 12:15:16

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2021-44647

Fedoraproject » Fedora » Version: 34
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Matching versions
LUA » LUA » Version: 5.4.3
cpe:2.3:a:lua:lua:5.4.3:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Assigned by: nvd@nist.gov (Primary)

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3EMGAQ5Y6GXJLY4K5DUOOEQT4MZ4J4F/

[SECURITY] Fedora 34 Update: lua-5.4.4-1.fc34 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory

CVEs referencing this url
https://security.gentoo.org/glsa/202305-23

Lua: Multiple Vulnerabilities (GLSA 202305-23) — Gentoo security

CVEs referencing this url
https://access.redhat.com/security/cve/cve-2021-44647

CVE-2021-44647- Red Hat Customer Portal
Third Party Advisory
http://lua-users.org/lists/lua-l/2021-11/msg00195.html

Crash : SEGV that occurs during error handling that occurs in the __close metamethod of to-be-closed after calling os.exit
Exploit;Mailing List;Vendor Advisory
http://lua-users.org/lists/lua-l/2021-11/msg00204.html

Re: Crash : SEGV that occurs during error handling that occurs in the __close metamethod of to-be-closed after calling os.exit
Mailing List;Patch;Vendor Advisory

Jump to