ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault
in getlocal and setlocal, as demonstrated by getlocal(3,2^31).
(CVE-2020-24370)
- https://bugs.mageia.org/show_bug.cgi?id=27213
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QXYMCIUNGK26VHAYHGP5LPW56G2KWOHQ/
- https://www.cve.org/CVERecord?id=CVE-2020-24370
- 7/core/lua-5.2.4-3.1.mga7
- 7/core/lua5.3-5.3.5-2.1.mga7
Get the latest Linux and open source security news straight to your inbox.