Logo
componentluajit
Name
luajit
Version
2.1.0-r8
Type
library
Description
-
Licenses
-
PURL
-
CPE
cpe:2.3:a:luajit:luajit:2.1.0:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
openwrt-25.12
2.1.0-r8

Patches#


#
Title
Author
Resolve
1
Patch #1
Unknown
2
Patch #2
Unknown
3
PPC: Add soft-float support to interpreter.
Mike Pall <mike>
4
PPC/e500 with SPE enabled: use soft float instead of failing
=?UTF-8?q?=C5=A0imon=20Bo=C5=99ek?= <simon.borek@nic.cz>
5
Patch #5
Unknown
6
Have powerpc use fake GOT like MIPS
Clint Bland <bland.cr@gmail.com>
7
PPC: Add soft-float support to JIT compiler backend.
Mike Pall <mike>

Vulnerabilities#


Name
Analysis
Description
Exploitable
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.
Exploitable
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).
Exploitable
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.
Exploitable
LuaJIT through 2.1.0-beta3 has an out-of-bounds read in lj_err_run in lj_err.c.
Exploitable
LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.