Logo
componentlua
Name
lua
Version
5.1.5
Type
library
Description
-
Licenses
MIT
PURL
-
CPE
cpe:2.3:a:lua:lua:5.1.5:-:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
2025.02.x
5.1.5

Patches#


#
Title
Author
Resolve
1
Patch #1
Francois Perrad <francois.perrad@gadz.org>
2
Patch #2
Francois Perrad <francois.perrad@gadz.org>
3
Fix stack overflow in vararg functions
Enrico Tassi <gareuselesinge@debian.org>
CVE-2014-5461
4
Patch #4
Francois Perrad <francois.perrad@gadz.org>
5
Patch #5
Francois Perrad <francois.perrad@gadz.org>

Vulnerabilities#


Name
Analysis
Description
Exploitable
Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.
Exploitable
Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments.