ALPINE-CVE-2019-6706 PUBLISHED CVSS 7.5 HIGH

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.16lua5.35.3.3-r0, 5.3.5-r1, 5.3.5-r0
Alpine:v3.17lua5.40, 0, 0
Alpine:v3.10lua5.30, 5.3.5-r1, 5.3.5-r0
Alpine:v3.14lua5.40, 0, 0
Alpine:v3.19lua5.35.3.4-r3, 5.3.5-r1, 5.3.5-r0
Alpine:v3.18lua5.40, 0, 0
Alpine:v3.9lua5.35.3.3-r0, 5.3.2-r0, 5.3.1-r0
Alpine:v3.17lua5.35.3.4-r4, 5.3.4-r2, 5.3.4-r1
Alpine:v3.7lua5.30, 5.3.0-r1, 5.3.0-r2
Alpine:v3.22lua5.35.3.5-r1, 0, 5.3.0-r1
Alpine:v3.15lua5.35.3.0-r5, 0, 5.3.5-r1
Alpine:v3.8lua5.35.3.5-r1, 5.3.5-r0, 5.3.4-r5
Alpine:v3.13lua5.35.3.5-r0, 5.3.5-r1, 5.3.5-r0
Alpine:v3.6lua5.35.3.0-r2, 0, 5.3.5-r1
Alpine:v3.20lua5.40, 0, 0
Alpine:v3.21lua5.35.3.0-r3, 5.3.0-r5, 5.3.1-r0
Alpine:v3.21lua5.40, 0, 0
Alpine:v3.19lua5.40, 0, 0
Alpine:v3.15lua5.40, 0, 0
Alpine:v3.16lua5.40, 0, 0

…and 8 more

Timeline

References

Open in Interactive Console →