5.3
CVSSv3

CVE-2020-24371

Published: 17/08/2020 Updated: 28/01/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

lua lua 5.4.0

Vendor Advisories

Debian Bug report logs - #971010 lua54: CVE-2020-24371 Package: src:lua54; Maintainer for src:lua54 is Debian Lua Team <pkg-lua-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 26 Sep 2020 07:51:01 UTC Severity: important Tags: fixed-upstream, security, upstream Fou ...