https://bugzilla.redhat.com/show_bug.cgi?id=2044415
Bug ID: 2044415 Summary: CVE-2021-44647 lua: type confusion in funcnamefromcode in ldebug.c could result in local DoS Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team@redhat.com Reporter: mkaplan@redhat.com CC: 4le@live.com, drjohnson1@gmail.com, lua-packagers-sig@lists.fedoraproject.org, mhroncok@redhat.com, michel@michel-slm.name, rob.myers@gtri.gatech.edu, spotrh@gmail.com Target Milestone: --- Classification: Other
Lua 5.4.4 and 5.4.2 are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service.
References:
http://lua-users.org/lists/lua-l/2021-11/msg00204.html http://lua-users.org/lists/lua-l/2021-11/msg00195.html
https://bugzilla.redhat.com/show_bug.cgi?id=2044415
Michael Kaplan mkaplan@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2044416
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2044416 [Bug 2044416] CVE-2021-44647 lua: type confusion in funcnamefromcode in ldebug.c could result in local DoS [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2044415
--- Comment #1 from Michael Kaplan mkaplan@redhat.com --- Created lua tracking bugs for this issue:
Affects: fedora-all [bug 2044416]
https://bugzilla.redhat.com/show_bug.cgi?id=2044415
Michael Kaplan mkaplan@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |2044418
https://bugzilla.redhat.com/show_bug.cgi?id=2044415
--- Comment #2 from juneau@redhat.com --- Marked all /services "notaffected." No 5.4.x versions of Lua found in service manifests.
https://bugzilla.redhat.com/show_bug.cgi?id=2044415
--- Doc Text *updated* by TEJ RATHI trathi@redhat.com --- A SEGV crash in funcnamefromcode() function in ldebug.c during error handling that occurs in '__close' metamethods. The highest threat from this is to availability feature where an attacker can cause a local denial of service.
https://bugzilla.redhat.com/show_bug.cgi?id=2044415
--- Comment #4 from Product Security DevOps Team prodsec-dev@redhat.com --- This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):
https://access.redhat.com/security/cve/cve-2021-44647
https://bugzilla.redhat.com/show_bug.cgi?id=2044415
Product Security DevOps Team prodsec-dev@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |NOTABUG Status|NEW |CLOSED Last Closed| |2022-01-28 07:30:57
https://bugzilla.redhat.com/show_bug.cgi?id=2044415
--- Doc Text *updated* by RaTasha Tillery-Smith rtillery@redhat.com --- A flaw was found in Lua. An SEGV crash in the funcnamefromcode() function in ldebug.c during error handling occurs in '__close' metamethods. This flaw allows an attacker to cause a denial of service.
https://bugzilla.redhat.com/show_bug.cgi?id=2044415 Bug 2044415 depends on bug 2044416, which changed state.
Bug 2044416 Summary: CVE-2021-44647 lua: type confusion in funcnamefromcode in ldebug.c could result in local DoS [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2044416
What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA
lua-packagers-sig@lists.fedoraproject.org