Name
luajit
Version
2.1.0~be
Type
library
Description
Just-In-Time Compiler for Lua
Licenses
MIT
PURL
-
CPE
cpe:2.3:*:luajit:luajit:2.1.0~beta3-210112:*:*:*:*:*:*:*
Other Versions#
Patches#
#
Title
Author
Resolve
1
Fix unsinking of IR_FSTORE for NULL metatable.
Changqing Li <changqing.li@windriver.com>
CVE-2024-25177
2
Rework stack overflow handling.
Mike Pall <mike>
CVE-2024-25178
3
Do not strip automatically, this leaves the stripping busines to OE
Khem Raj <raj.khem@gmail.com>
4
Ensure correct stack top for OOM error message.
Mike Pall <mike>
5
Cleanup stack overflow handling.
Mike Pall <mike>
6
Fix zero stripping in %g number formatting.
Changqing Li <changqing.li@windriver.com>
CVE-2024-25176
7
Patch #7
Khem Raj <raj.khem@gmail.com>
Vulnerabilities#
Name
Analysis
Description
Patched
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.
Patched
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).
Patched
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.