CVE-2021-44964
Published: 14 March 2022
Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
lua5.1
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(code not present)
|
| focal |
Not vulnerable
(code not present)
|
|
| impish |
Ignored
(end of life)
|
|
| jammy |
Not vulnerable
(code not present)
|
|
| kinetic |
Not vulnerable
(code not present)
|
|
| lunar |
Not vulnerable
(code not present)
|
|
| mantic |
Not vulnerable
(code not present)
|
|
| noble |
Not vulnerable
(code not present)
|
|
| trusty |
Not vulnerable
(code not present)
|
|
| upstream |
Needs triage
|
|
| xenial |
Not vulnerable
(code not present)
|
|
|
lua5.2
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(code not present)
|
| focal |
Not vulnerable
(code not present)
|
|
| impish |
Ignored
(end of life)
|
|
| jammy |
Not vulnerable
(code not present)
|
|
| kinetic |
Not vulnerable
(code not present)
|
|
| lunar |
Not vulnerable
(code not present)
|
|
| mantic |
Not vulnerable
(code not present)
|
|
| noble |
Not vulnerable
(code not present)
|
|
| trusty |
Needs triage
|
|
| upstream |
Needs triage
|
|
| xenial |
Needs triage
|
|
|
lua5.3
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(code not present)
|
| focal |
Not vulnerable
(code not present)
|
|
| impish |
Ignored
(end of life)
|
|
| jammy |
Not vulnerable
(code not present)
|
|
| kinetic |
Not vulnerable
(code not present)
|
|
| lunar |
Not vulnerable
(code not present)
|
|
| mantic |
Not vulnerable
(code not present)
|
|
| noble |
Not vulnerable
(code not present)
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Needs triage
|
|
|
lua5.4
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| focal |
Does not exist
|
|
| impish |
Ignored
(end of life)
|
|
| jammy |
Not vulnerable
(5.4.4)
|
|
| kinetic |
Not vulnerable
(5.4.4)
|
|
| lunar |
Not vulnerable
(5.4.4)
|
|
| mantic |
Not vulnerable
(5.4.4)
|
|
| noble |
Not vulnerable
(5.4.4)
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
Patches:
upstream: https://github.com/lua/lua/commit/0bfc572e51d9035a615ef6e9523f736c9ffa8e57 upstream: https://github.com/lua/lua/commit/066e0f93c4901e601d93e31fb700f8f66f95feb8 upstream: https://github.com/lua/lua/commit/cf613cdc6fa367257fc61c256f63d917350858b5 upstream: https://github.com/lua/lua/commit/86ec152433baf8daf39f03a59c6842cbe33a179d upstream: https://github.com/lua/lua/commit/597a53bbc681089d85b082b46c2e2428dec43b86 |
||
|
lua50
Launchpad, Ubuntu, Debian |
bionic |
Needs triage
|
| focal |
Needs triage
|
|
| impish |
Ignored
(end of life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Needs triage
|
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 6.3 |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | Required |
| Scope | Changed |
| Confidentiality | None |
| Integrity impact | None |
| Availability impact | High |
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H |
References
- http://lua-users.org/lists/lua-l/2021-12/msg00030.html
- http://lua-users.org/lists/lua-l/2021-12/msg00015.html
- https://github.com/Lua-Project/lua-5.4.4-sandbox-escape-with-new-vulnerability
- http://lua-users.org/lists/lua-l/2021-11/msg00186.html
- http://lua-users.org/lists/lua-l/2021-12/msg00007.html
- https://www.cve.org/CVERecord?id=CVE-2021-44964
- NVD
- Launchpad
- Debian