Lua 5.4.0 (fixed in 5.4.1) has a segmentation fault in changedline in ldebug.c (e.g., when called by luaG_traceexec) because it incorrectly expects that an oldpc value is always updated upon a return of the flow of control to a function.
References
| Link | Resource |
|---|---|
| http://lua-users.org/lists/lua-l/2020-07/msg00123.html | Exploit Mailing List Third Party Advisory |
| https://github.com/lua/lua/commit/a2195644d89812e5b157ce7bac35543e06db05e3 | Patch Third Party Advisory |
| https://www.lua.org/bugs.html#5.4.0-8 | |
| http://lua-users.org/lists/lua-l/2020-07/msg00123.html | Exploit Mailing List Third Party Advisory |
| https://github.com/lua/lua/commit/a2195644d89812e5b157ce7bac35543e06db05e3 | Patch Third Party Advisory |
Configurations
History
19 Feb 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Lua 5.4.0 (fixed in 5.4.1) has a segmentation fault in changedline in ldebug.c (e.g., when called by luaG_traceexec) because it incorrectly expects that an oldpc value is always updated upon a return of the flow of control to a function. | |
| References |
|
Information
Published : 2020-07-24 21:15
Updated : 2025-02-19 15:15
NVD link : CVE-2020-15945
Mitre link : CVE-2020-15945
CVE.ORG link : CVE-2020-15945
JSON object : View
Products Affected
lua
- lua
CWE