ISOMAN

CVE

CVE-2014-5461

Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments.

Severity
MEDIUM
CVSS
5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://advisories.mageia.org/MGASA-2014-0414.html
  2. http://lists.opensuse.org/opensuse-updates/2014-09/msg00030.html
  3. http://secunia.com/advisories/59890
  4. http://secunia.com/advisories/60869
  5. http://secunia.com/advisories/61411
  6. http://www.debian.org/security/2014/dsa-3015
  7. http://www.debian.org/security/2014/dsa-3016
  8. http://www.lua.org/bugs.html#5.2.2-1
  9. http://www.mandriva.com/security/advisories?name=MDVSA-2015:144
  10. http://www.openwall.com/lists/oss-security/2014/08/21/1
  11. http://www.openwall.com/lists/oss-security/2014/08/21/4
  12. http://www.openwall.com/lists/oss-security/2014/08/27/2
  13. http://www.securityfocus.com/bid/69342
  14. http://www.ubuntu.com/usn/USN-2338-1
  15. https://security.gentoo.org/glsa/201701-53
  16. https://security.gentoo.org/glsa/202305-23
  17. http://advisories.mageia.org/MGASA-2014-0414.html
  18. http://lists.opensuse.org/opensuse-updates/2014-09/msg00030.html
  19. http://secunia.com/advisories/59890
  20. http://secunia.com/advisories/60869