CVE-2020-24342

Fixed in a distro release EPSS 1%

Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_callnoyield twice in a row.

Published 2020-08-13 · CVE record · OSV

Products: lua, fedoraproject fedora

Distro releases