CVE-2021-43519
Summary
| CVE | CVE-2021-43519 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-11-09 13:15:00 UTC |
| Updated | 2023-11-07 03:39:00 UTC |
| Description | Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file. |
Risk And Classification
Problem Types: CWE-674
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [SECURITY] Fedora 35 Update: lua-5.4.4-1.fc35 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| Crash: Recursive coroutine with pcall leads to stackoverflow of interpreter | MISC | lua-users.org | |
| [SECURITY] Fedora 34 Update: lua-5.4.4-1.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 35 Update: lua-5.4.4-1.fc35 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: lua-5.4.4-1.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| Re: Crash: Recursive coroutine with pcall leads to stackoverflow of interpreter | MISC | lua-users.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160489 Oracle Enterprise Linux Security Update for lua (ELSA-2023-0957)
- 184243 Debian Security Update for lua5.4 (CVE-2021-43519)
- 241222 Red Hat Update for lua (RHSA-2023:0957)
- 241261 Red Hat Update for lua (RHSA-2023:1211)
- 282349 Fedora Security Update for lua (FEDORA-2022-e6b2bd5b50)
- 282405 Fedora Security Update for lua (FEDORA-2022-473560d1a6)
- 296063 Oracle Solaris 11.4 Support Repository Update (SRU) 45.119.2 Missing (CPUAPR2022)
- 354467 Amazon Linux Security Advisory for lua : ALAS2022-2022-031
- 354526 Amazon Linux Security Advisory for lua : ALAS2022-2022-176
- 900450 Common Base Linux Mariner (CBL-Mariner) Security Update for lua (6183)
- 900940 Common Base Linux Mariner (CBL-Mariner) Security Update for lua (6672-1)
- 940945 AlmaLinux Security Update for lua (ALSA-2023:0957)
- 960895 Rocky Linux Security Update for lua (RLSA-2023:0957)