CVE-2021-43519
CVE-2021-43519
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.
CVSS 5.5 · Medium · EPSS 1.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
lua5.4 Debian:12
- Affected ranges
- ECOSYSTEM: < 5.4.4-1
Update to 5.4.4-1
lua5.4 Debian:13
- Affected ranges
- ECOSYSTEM: < 5.4.4-1
Update to 5.4.4-1
lua5.4 Debian:14
- Affected ranges
- ECOSYSTEM: < 5.4.4-1
Update to 5.4.4-1
bam Ubuntu:16.04:LTS
- Versions
- 0.4.0-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
blobby Ubuntu:16.04:LTS
- Versions
- 1.0-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
darktable Ubuntu:16.04:LTS
- Versions
- 1.6.8-1
- 1.6.9-1
- 2.0.0-1
- 2.0.1-1
- 2.0.3-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
emscripten Ubuntu:16.04:LTS
- Versions
- 1.22.1-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freedroidrpg Ubuntu:16.04:LTS
- Versions
- 0.15.1-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
fs-uae Ubuntu:16.04:LTS
- Versions
- 2.4.1+ds-3ubuntu1
- 2.6.1+dfsg-2
- 2.6.2+dfsg-2
- 2.6.2+dfsg-3
- 2.6.2+dfsg-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golly Ubuntu:16.04:LTS
- Versions
- 2.6-2build1
- 2.7-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
scite Ubuntu:16.04:LTS
- Versions
- 3.5.0-1
- 3.6.0-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
scorched3d Ubuntu:16.04:LTS
- Versions
- 43.3.d+dfsg-1.1build1
- 43.3.d+dfsg-1.1build2
- 43.3.d+dfsg-1.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tarantool Ubuntu:16.04:LTS
- Versions
- 1.6.3.539.g211672f-1
- 1.6.7.588.g76bbd9c-1
- 1.6.7.588.g76bbd9c-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
vifm Ubuntu:16.04:LTS
- Versions
- 0.7.8-3
- 0.7.8-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
widelands Ubuntu:16.04:LTS
- Versions
- 1:18-3build2
- 1:18-3build3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bam Ubuntu:18.04:LTS
- Versions
- 0.4.0-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
blobby Ubuntu:18.04:LTS
- Versions
- 1.0-3
- 1.0-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
darktable Ubuntu:18.04:LTS
- Versions
- 2.2.5-2
- 2.4.0-1
- 2.4.1-1
- 2.4.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
eja Ubuntu:18.04:LTS
- Versions
- 9.5.20-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
emscripten Ubuntu:18.04:LTS
- Versions
- 1.22.1-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freedroidrpg Ubuntu:18.04:LTS
- Versions
- 0.16.1-2build1
- 0.16.1-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
fs-uae Ubuntu:18.04:LTS
- Versions
- 2.8.3+dfsg-1
- 2.8.4+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golly Ubuntu:18.04:LTS
- Versions
- 2.8-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- http://lua-users.org/lists/lua-l/2021-10/msg00123.html
- http://lua-users.org/lists/lua-l/2021-11/msg00015.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C7XHFYHGSZKL53VCLSJSAJ6VMFGAIXKO/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3EMGAQ5Y6GXJLY4K5DUOOEQT4MZ4J4F/
- https://nvd.nist.gov/vuln/detail/CVE-2021-43519