Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments.

The remote host is affected by the vulnerability described in GLSA-202305-23 (Lua: Multiple Vulnerabilities)

  - Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-     dependent attackers to cause a denial of service (crash) via a small number of arguments to a function     with a large number of fixed arguments. (CVE-2014-5461)

  - Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which     can cause a local denial of service. (CVE-2021-44647)

  - singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain     luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles     untrusted Lua code. (CVE-2022-28805)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the lua package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - Buffer overflow in the vararg functions in ldo.c in Lua     5.1 through 5.2.x before 5.2.3 allows context-dependent     attackers to cause a denial of service (crash) via a     small number of arguments to a function with a large     number of fixed arguments.(CVE-2014-5461)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the lua package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - Buffer overflow in the vararg functions in ldo.c in Lua     5.1 through 5.2.x before 5.2.3 allows context-dependent     attackers to cause a denial of service (crash) via a     small number of arguments to a function with a large     number of fixed arguments.(CVE-2014-5461)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the lua package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Buffer overflow in the vararg functions in ldo.c in Lua     5.1 through 5.2.x before 5.2.3 allows context-dependent     attackers to cause a denial of service (crash) via a     small number of arguments to a function with a large     number of fixed arguments.(CVE-2014-5461)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201701-53 (Lua: Buffer overflow)

    A buffer overflow was discovered in the vararg functions in ldo.c in       Lua.
  Impact :

    Context-dependent could cause a Denial of Service condition or execute       arbitrary code.
  Workaround :

    There is no known workaround at this time.

Updated lua and lua5.1 packages fix security vulnerability :

A heap-based overflow vulnerability was found in the way Lua handles varargs functions with many fixed parameters called with few arguments, leading to application crashes or, potentially, arbitrary code execution (CVE-2014-5461).

Fix stack overflow in vararg functions.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Solaris system is missing necessary patches to address security updates :

  - Buffer overflow in the vararg functions in ldo.c in Lua     5.1 through 5.2.x before 5.2.3 allows context-dependent     attackers to cause a denial of service (crash) via a     small number of arguments to a function with a large     number of fixed arguments. (CVE-2014-5461)

lua was updated to fix an overflow in varargs functions (CVE-2014-5461 ,bnc#893824)

It was discovered that Lua incorrectly handled certain vararg functions with a large number of fixed parameters. An attacker could use this issue to cause Lua applications to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A heap-based overflow vulnerability was found in the way Lua, a simple, extensible, embeddable programming language, handles varargs functions with many fixed parameters called with few arguments, leading to application crashes or, potentially, arbitrary code execution.

ID	Name	Product	Family	Severity
175055	GLSA-202305-23 : Lua: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	critical
135639	EulerOS Virtualization 3.0.2.2 : lua (EulerOS-SA-2020-1477)	Nessus	Huawei Local Security Checks	medium
134509	EulerOS Virtualization for ARM 64 3.0.2.0 : lua (EulerOS-SA-2020-1220)	Nessus	Huawei Local Security Checks	medium
132164	EulerOS 2.0 SP3 : lua (EulerOS-SA-2019-2629)	Nessus	Huawei Local Security Checks	medium
131874	EulerOS 2.0 SP2 : lua (EulerOS-SA-2019-2382)	Nessus	Huawei Local Security Checks	medium
129135	EulerOS 2.0 SP5 : lua (EulerOS-SA-2019-1978)	Nessus	Huawei Local Security Checks	medium
96688	GLSA-201701-53 : Lua: Buffer overflow	Nessus	Gentoo Local Security Checks	medium
82397	Mandriva Linux Security Advisory : lua (MDVSA-2015:144)	Nessus	Mandriva Local Security Checks	medium
82194	Debian DLA-47-1 : lua5.1 security update	Nessus	Debian Local Security Checks	medium
80701	Oracle Solaris Third-Party Patch Update : lua (cve_2014_5461_buffer_errors)	Nessus	Solaris Local Security Checks	medium
78684	Mandriva Linux Security Advisory : lua (MDVSA-2014:205)	Nessus	Mandriva Local Security Checks	medium
78345	Amazon Linux AMI : lua (ALAS-2014-402)	Nessus	Amazon Linux Local Security Checks	medium
77778	openSUSE Security Update : lua (openSUSE-SU-2014:1145-1)	Nessus	SuSE Local Security Checks	medium
77525	Ubuntu 14.04 LTS : Lua vulnerability (USN-2338-1)	Nessus	Ubuntu Local Security Checks	high
77469	Debian DSA-3016-1 : lua5.2 - security update	Nessus	Debian Local Security Checks	medium
77468	Debian DSA-3015-1 : lua5.1 - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2014-5461

high

Tenable Plugins

critical

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium