CVE-2014-5461
EPSS 10.6%lua5.2 - security update
Published: 9/4/2014Modified: 4/28/2026
Description
Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments.
Affected packages (5)
- Debian/lua5.1from 0, < 5.1.5-7
- Debian/lua5.1from 0, < 5.1.4-5+deb6u1
- Debian/lua5.1from 0, < 5.1.5-4+deb7u1
- Debian/lua5.2from 0, < 5.2.3-1
- Debian/lua5.2from 0, < 5.2.1-3+deb7u1