Search CVE reports

Toggle filters

1 – 2 of 2 results

CVE-2021-43519

Low priority
Needs evaluation

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

45 affected packages

enigma, freeciv, freedroidrpg, fs-uae, golly...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
enigma Not affected Not affected Not affected Not affected
freeciv Not affected Not affected Not affected Not affected
freedroidrpg Needs evaluation Needs evaluation Needs evaluation Needs evaluation
fs-uae Needs evaluation Needs evaluation Needs evaluation Needs evaluation
golly Needs evaluation Needs evaluation Needs evaluation Needs evaluation
goxel Needs evaluation Needs evaluation Needs evaluation Needs evaluation
grub2 Not affected Not affected Not affected Not affected
gtk2-engines Not affected Not affected Not affected Not affected
haskell-hslua Not affected Not affected Not affected Not affected
hedgewars Not affected Not affected Not affected Not affected
lua5.1 Not affected Not affected Not affected Not affected
lua5.2 Not affected Not affected Not affected Not affected
lua5.3 Not affected Not affected Not affected Not affected
lua5.4 Not affected Not affected Not in release Not in release
lua50 Not in release Not in release Not affected Not affected
luajit Not affected Not affected Not affected Not affected
mame Not affected Not affected Not affected Not affected
naev Needs evaluation Needs evaluation Needs evaluation —
openscenegraph Not affected Not affected Not affected Not affected
redis Not affected Not affected Not affected Not affected
rust-lua52-sys Needs evaluation Needs evaluation Needs evaluation —
scite Needs evaluation Needs evaluation Needs evaluation Needs evaluation
scorched3d Needs evaluation Needs evaluation Needs evaluation Needs evaluation
scummvm Not affected Not affected Not affected Not affected
spring Not affected Not affected Not affected Not affected
syslinux Not affected Not affected Not affected Not affected
syslinux-legacy Not in release Not in release Not affected Not affected
tagua Not affected Not affected Not affected Not affected
tarantool Needs evaluation Needs evaluation Needs evaluation —
texlive-bin Not affected Not affected Not affected Not affected
tup Needs evaluation Needs evaluation Needs evaluation —
ufoai Not affected Not affected Not affected Not affected
vifm Needs evaluation Needs evaluation Needs evaluation Needs evaluation
wcc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
wesnoth — — — —
widelands Needs evaluation Needs evaluation Needs evaluation Needs evaluation
xmoto Not affected Not affected Not affected Not affected
zfs-linux Not affected Not affected Not affected Not affected
ardour Not affected Not affected Not affected Not affected
bam Needs evaluation Needs evaluation Needs evaluation Needs evaluation
blobby Needs evaluation Needs evaluation Needs evaluation Needs evaluation
ceph Not affected Not affected Not affected Not affected
darktable Needs evaluation Needs evaluation Needs evaluation Needs evaluation
eja Not in release Needs evaluation Needs evaluation Needs evaluation
emscripten Needs evaluation Needs evaluation — Needs evaluation
Show all 45 packages Show less packages

CVE-2017-17528

Medium priority
Vulnerable

backends/platform/sdl/posix/posix.cpp in ScummVM 1.9.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks...

1 affected package

scummvm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
scummvm Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages