ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31). (CVE-2020-24370) References: . MGASA-2020-0362 - Updated lua and lua5.3 packages fix security vulnerability Publication date: 04 Sep 2020 URL: https://advisories.mageia.org/MGASA-2020-0362.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-24370 ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31). (CVE-2020-24370) References: - https://bugs.mageia.org/show_bug.cgi?id=27213 - https://lists.fedoraproject.org/archives/list/
Get the latest Linux and open source security news straight to your inbox.