CVE-2014-5461
Published Sep 4, 2014
Last updated 2 years ago
Overview
- Description
- Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments.
- Source
- secalert@redhat.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-119
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFBF430B-0832-44B0-AA0E-BA9E467F7668"
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lua:lua:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC473796-6345-4160-B361-DC160D7868C6"
},
{
"criteria": "cpe:2.3:a:lua:lua:5.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5923214-1896-43F0-977A-99DDD44387F6"
},
{
"criteria": "cpe:2.3:a:lua:lua:5.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76151AAB-9D7A-417D-ABC3-ED3D5E73FE1E"
},
{
"criteria": "cpe:2.3:a:lua:lua:5.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A910E12-8DDC-4E9A-ACD8-8ABE0C889A42"
},
{
"criteria": "cpe:2.3:a:lua:lua:5.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0AD03FE-C0BB-485B-92FD-7DBE4F6CF866"
},
{
"criteria": "cpe:2.3:a:lua:lua:5.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22511164-25BB-4A10-B111-CEEEEE41D8BA"
},
{
"criteria": "cpe:2.3:a:lua:lua:5.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68E5F477-8E32-421C-BE28-C04A066E439A"
},
{
"criteria": "cpe:2.3:a:lua:lua:5.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74A8D450-9B86-43DC-93A1-F68E42391948"
},
{
"criteria": "cpe:2.3:a:lua:lua:5.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2293D8C6-2D69-49EF-8BB9-F5222951386B"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mageia:mageia:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76F1E356-E019-47E8-AA5F-702DA93CF74E"
},
{
"criteria": "cpe:2.3:o:mageia:mageia:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F805A106-9A6F-48E7-8582-D3C5A26DFC11"
}
],
"operator": "OR"
}
]
}
]