![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2019-6706 |
Description: | Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships. |
Test IDs: | 1.3.6.1.4.1.25623.1.1.2.2019.2339 1.3.6.1.4.1.25623.1.0.843971 1.3.6.1.4.1.25623.1.0.875619 1.3.6.1.4.1.25623.1.0.852286 1.3.6.1.4.1.25623.1.1.4.2019.0247.1 1.3.6.1.4.1.25623.1.1.2.2019.1776 1.3.6.1.4.1.25623.1.1.1.2.2023.3469 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2019-6706 http://lua-users.org/lists/lua-l/2019-01/msg00039.html http://packetstormsecurity.com/files/151335/Lua-5.3.5-Use-After-Free.html https://access.redhat.com/security/cve/cve-2019-6706 https://github.com/Lua-Project/cve-analysis/blob/a43c9ccd00274b31fa2f24c6c8f20ce36655682d/CVE-2019-6706.pdf https://github.com/lua/lua/commit/89aee84cbc9224f638f3b7951b306d2ee8ecb71e https://lists.debian.org/debian-lts-announce/2023/06/msg00031.html |