CVEvulnerability

CVE-2020-24370

5.3 MEDIUM Published 2020-08-17 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2020-08-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-191

Description

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31).

Affected configurations

• lua lua 5.2.0 • lua lua 5.2.1 • lua lua 5.2.2 • lua lua 5.2.3 • lua lua 5.3.0 • lua lua 5.3.1 • lua lua 5.3.2 • lua lua 5.3.3 • lua lua 5.3.4 • lua lua 5.3.5 • lua lua 5.4.0 • fedoraproject fedora 31 • fedoraproject fedora 32 • debian debian linux 9.0

Related

Weakness · CWE (1)

  • CWE-191 Integer Underflow (Wrap or Wraparound) weakness

References