Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.

An update of the nmap package has been released.

An update of the lua package has been released.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0957 advisory.

  - Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial     of Service via a crafted script file. (CVE-2021-43519)

  - Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers     to perform Sandbox Escape via a crafted script file. (CVE-2021-44964)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1211 advisory.

  - lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

  - lua: use after free allows Sandbox Escape (CVE-2021-44964)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0957 advisory.

  - Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial     of Service via a crafted script file. (CVE-2021-43519)

  - Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers     to perform Sandbox Escape via a crafted script file. (CVE-2021-44964)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0957 advisory.

  - Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial     of Service via a crafted script file. (CVE-2021-43519)

  - Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers     to perform Sandbox Escape via a crafted script file. (CVE-2021-44964)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0957 advisory.

  - lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

  - lua: use after free allows Sandbox Escape (CVE-2021-44964)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-176 advisory.

  - Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial     of Service via a crafted script file. (CVE-2021-43519)

  - Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which     can cause a local denial of service. (CVE-2021-44647)

  - singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain     luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles     untrusted Lua code. (CVE-2022-28805)

  - An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a     recursive error occurs. (CVE-2022-33099)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
203884	Photon OS 3.0: Nmap PHSA-2023-3.0-0601	Nessus	PhotonOS Local Security Checks	critical
203667	Photon OS 4.0: Nmap PHSA-2023-4.0-0517	Nessus	PhotonOS Local Security Checks	high
203606	Photon OS 5.0: Nmap PHSA-2023-5.0-0036	Nessus	PhotonOS Local Security Checks	critical
203478	Photon OS 4.0: Lua PHSA-2021-4.0-0130	Nessus	PhotonOS Local Security Checks	medium
173996	Rocky Linux 9 : lua (RLSA-2023:0957)	Nessus	Rocky Linux Local Security Checks	medium
172546	RHEL 9 : lua (RHSA-2023:1211)	Nessus	Red Hat Local Security Checks	medium
172007	AlmaLinux 9 : lua (ALSA-2023:0957)	Nessus	Alma Linux Local Security Checks	medium
171991	Oracle Linux 9 : lua (ELSA-2023-0957)	Nessus	Oracle Linux Local Security Checks	medium
171975	RHEL 9 : lua (RHSA-2023:0957)	Nessus	Red Hat Local Security Checks	medium
166997	Amazon Linux 2022 : (ALAS2022-2022-176)	Nessus	Amazon Linux Local Security Checks	critical

Detections

Analytics

CVE-2021-43519

medium

Tenable Plugins

critical

high

critical

medium

medium

medium

medium

medium

medium

critical