Luajit

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-25178 CRITICAL POC PATCH Act Now

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

Buffer Overflow Information Disclosure Debian Ubuntu Red Hat +2

NVD GitHub

CVSS 3.1

9.1

EPSS

0.1%

CVE-2024-25177 HIGH POC PATCH This Week

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).

Denial Of Service Null Pointer Dereference Debian Ubuntu Red Hat +2

NVD GitHub

CVSS 3.1

7.5

EPSS

0.4%

CVE-2024-25176 CRITICAL POC PATCH Act Now

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.

Buffer Overflow Stack Overflow Debian Ubuntu Red Hat +2

NVD GitHub

CVSS 3.1

9.8

EPSS

0.1%

CVE-2024-25178

EPSS 0% CVSS 9.1

CRITICAL POC PATCH Act Now

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

Buffer Overflow Information Disclosure Debian +4

NVD GitHub

CVE-2024-25177

EPSS 0% CVSS 7.5

HIGH POC PATCH This Week

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).

Denial Of Service Null Pointer Dereference Debian +4

NVD GitHub

CVE-2024-25176

EPSS 0% CVSS 9.8

CRITICAL POC PATCH Act Now

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.

Buffer Overflow Stack Overflow Debian +4

NVD GitHub