Wind River Support Network

HomeDefectsLIN1021-5583
Fixed

LIN1021-5583 : Security Advisory - lua - CVE-2021-45985

Created: Apr 10, 2023    Updated: Apr 18, 2023
Resolved Date: Apr 18, 2023
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.

CREATE(Triage):(User=admin) CVE-2021-45985 (https://nvd.nist.gov/vuln/detail/CVE-2021-45985)
Live chat
Online