Wind River Support Network

HomeDefectsLIN1021-3253
Fixed

LIN1021-3253 : Security Advisory - lua - CVE-2022-28805

Created: Apr 9, 2022    Updated: Jun 8, 2022
Resolved Date: Jun 8, 2022
Found In Version: 10.21.20.1
Fix Version: 10.21.20.13
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

singlevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.

CREATE(Triage):(User=admin) CVE-2022-28805 (https://nvd.nist.gov/vuln/detail/CVE-2022-28805)

CVEs


Live chat
Online