https://bugzilla.redhat.com/show_bug.cgi?id=2047672
Bug ID: 2047672 Summary: CVE-2021-43519 lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: mrehak@redhat.com CC: 4le@live.com, bdettelb@redhat.com, caswilli@redhat.com, csutherl@redhat.com, drjohnson1@gmail.com, fjansen@redhat.com, gzaronik@redhat.com, jburrell@redhat.com, jclere@redhat.com, jwon@redhat.com, kaycoth@redhat.com, krathod@redhat.com, lua-packagers-sig@lists.fedoraproject.org, mhroncok@redhat.com, michel@michel-slm.name, mturk@redhat.com, packaging-team-maint@redhat.com, pjindal@redhat.com, rob.myers@gtri.gatech.edu, spotrh@gmail.com, szappis@redhat.com, tkasparek@redhat.com Target Milestone: --- Classification: Other
Stack overflow in lua_resume of ldo.c in Lua Interpreter allows attackers to perform a Denial of Service via a crafted script file.
Reference:
http://lua-users.org/lists/lua-l/2021-11/msg00015.html http://lua-users.org/lists/lua-l/2021-10/msg00123.html