CVE-2020-15888
Fixed in a distro release EPSS 2%
Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based buffer overflow, heap-based buffer over-read, or use-after-free.
Products: lua
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | lua | 5.4.1-1 |
| Debian 12 | lua5.4 | 5.4.1-1 |
| Debian 13 | lua5.4 | 5.4.1-1 |
| Debian 14 | lua5.4 | 5.4.1-1 |
| openSUSE Tumbleweed | lua55 | 5.5.0~beta1-1.1 |