The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0957 advisory.

  - lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

  - lua: use after free allows Sandbox Escape (CVE-2021-44964)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the lua package has been released.

An update of the nmap package has been released.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0957 advisory.

  - Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial     of Service via a crafted script file. (CVE-2021-43519)

  - Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers     to perform Sandbox Escape via a crafted script file. (CVE-2021-44964)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0957 advisory.

  - Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial     of Service via a crafted script file. (CVE-2021-43519)

  - Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers     to perform Sandbox Escape via a crafted script file. (CVE-2021-44964)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1211 advisory.

  - lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

  - lua: use after free allows Sandbox Escape (CVE-2021-44964)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-176 advisory.

  - Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial     of Service via a crafted script file. (CVE-2021-43519)

  - Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which     can cause a local denial of service. (CVE-2021-44647)

  - singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain     luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles     untrusted Lua code. (CVE-2022-28805)

  - An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a     recursive error occurs. (CVE-2022-33099)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0957 advisory.

  - Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial     of Service via a crafted script file. (CVE-2021-43519)

  - Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers     to perform Sandbox Escape via a crafted script file. (CVE-2021-44964)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
171975	RHEL 9 : lua (RHSA-2023:0957)	Nessus	Red Hat Local Security Checks	2/28/2023	4/28/2024	medium
203478	Photon OS 4.0: Lua PHSA-2021-4.0-0130	Nessus	PhotonOS Local Security Checks	7/23/2024	7/23/2024	medium
203667	Photon OS 4.0: Nmap PHSA-2023-4.0-0517	Nessus	PhotonOS Local Security Checks	7/23/2024	7/23/2024	high
171991	Oracle Linux 9 : lua (ELSA-2023-0957)	Nessus	Oracle Linux Local Security Checks	2/28/2023	9/15/2023	medium
203606	Photon OS 5.0: Nmap PHSA-2023-5.0-0036	Nessus	PhotonOS Local Security Checks	7/23/2024	7/23/2024	critical
172007	AlmaLinux 9 : lua (ALSA-2023:0957)	Nessus	Alma Linux Local Security Checks	2/28/2023	9/1/2023	medium
172546	RHEL 9 : lua (RHSA-2023:1211)	Nessus	Red Hat Local Security Checks	3/14/2023	4/28/2024	medium
166997	Amazon Linux 2022 : (ALAS2022-2022-176)	Nessus	Amazon Linux Local Security Checks	11/4/2022	10/5/2023	critical
173996	Rocky Linux 9 : lua (RLSA-2023:0957)	Nessus	Rocky Linux Local Security Checks	4/6/2023	11/6/2023	medium
203884	Photon OS 3.0: Nmap PHSA-2023-3.0-0601	Nessus	PhotonOS Local Security Checks	7/24/2024	7/24/2024	critical

Detections

Analytics

Plugins Search

medium

medium

high

medium

critical

medium

medium

critical

medium

critical