https://bugzilla.redhat.com/show_bug.cgi?id=2073884
Bug ID: 2073884 Summary: CVE-2022-28805 dev-lang/lua: heap buffer overread Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: high Priority: high Assignee: security-response-team@redhat.com Reporter: ahanwate@redhat.com CC: 4le@live.com, drjohnson1@gmail.com, lua-packagers-sig@lists.fedoraproject.org, mhroncok@redhat.com, michel@michel-slm.name, rob.myers@gtri.gatech.edu, spotrh@gmail.com Target Milestone: --- Classification: Other
singlevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.
https://lua-users.org/lists/lua-l/2022-02/msg00001.html https://lua-users.org/lists/lua-l/2022-02/msg00070.html https://lua-users.org/lists/lua-l/2022-04/msg00009.html https://github.com/lua/lua/commit/1f3c6f4534c6411313361697d98d1145a1f030fa
https://bugzilla.redhat.com/show_bug.cgi?id=2073884
Avinash Hanwate ahanwate@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |2073886 Priority|high |low Severity|high |low
https://bugzilla.redhat.com/show_bug.cgi?id=2073884
Avinash Hanwate ahanwate@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2073889
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2073889 [Bug 2073889] CVE-2022-28805 lua: dev-lang/lua: heap buffer overread [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2073884
--- Comment #1 from Avinash Hanwate ahanwate@redhat.com --- Created lua tracking bugs for this issue:
Affects: fedora-all [bug 2073889]
https://bugzilla.redhat.com/show_bug.cgi?id=2073884
Sandipan Roy saroy@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Summary|CVE-2022-28805 |CVE-2022-28805 lua: heap |dev-lang/lua: heap buffer |buffer overread |overread |
https://bugzilla.redhat.com/show_bug.cgi?id=2073884
Sandipan Roy saroy@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2074542
https://bugzilla.redhat.com/show_bug.cgi?id=2073884
--- Doc Text *updated* by Sandipan Roy saroy@redhat.com --- A heap buffer-overflow vulnerability was found in Lua. This flaw happens because a vulnerable code is present in lparser.c function of Lua and it can allow to execution of an untrusted Lua code into a system and can do a malicious activity.
https://bugzilla.redhat.com/show_bug.cgi?id=2073884
--- Doc Text *updated* by RaTasha Tillery-Smith rtillery@redhat.com --- A heap buffer-overflow vulnerability was found in Lua. The flaw occurs due to vulnerable code present in the lparser.c function of Lua that allows the execution of untrusted Lua code into a system, resulting in malicious activity.
https://bugzilla.redhat.com/show_bug.cgi?id=2073884 Bug 2073884 depends on bug 2073889, which changed state.
Bug 2073889 Summary: CVE-2022-28805 lua: heap buffer overread [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2073889
What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA
https://bugzilla.redhat.com/show_bug.cgi?id=2073884
--- Comment #4 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2023:2582 https://access.redhat.com/errata/RHSA-2023:2582
https://bugzilla.redhat.com/show_bug.cgi?id=2073884
errata-xmlrpc errata-xmlrpc@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2023:2582
https://bugzilla.redhat.com/show_bug.cgi?id=2073884
--- Comment #5 from Product Security DevOps Team prodsec-dev@redhat.com --- This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):
https://access.redhat.com/security/cve/cve-2022-28805
https://bugzilla.redhat.com/show_bug.cgi?id=2073884
Product Security DevOps Team prodsec-dev@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |ERRATA Last Closed| |2023-05-09 15:45:06
lua-packagers-sig@lists.fedoraproject.org
-
bugzilla＠redhat.com