Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 835340 (CVE-2021-44964)

Summary: <dev-lang/lua-5.4.4: UAF leading to sandbox escape
Product: Gentoo Security Reporter: John Helmert III <ajak>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: CONFIRMED ---    
Severity: normal CC: 89q1r14hd, ajak, robbat2, williamh
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
URL: https://github.com/Lua-Project/lua-5.4.4-sandbox-escape-with-new-vulnerability
Whiteboard: B2 [ebuild]
Package list:
Runtime testing required: ---

Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-03-15 15:36:32 UTC
CVE-2021-44964:

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

http://lua-users.org/lists/lua-l/2021-11/msg00186.html
http://lua-users.org/lists/lua-l/2021-12/msg00007.html
http://lua-users.org/lists/lua-l/2021-12/msg00015.html
http://lua-users.org/lists/lua-l/2021-12/msg00030.html

Can't tell if any patch exists or if one has made it into any release.
Comment 1 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-10-14 02:45:21 UTC
Bunch of discussion about a patch, but none seems to have made it into lua.git
Comment 2 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2024-02-10 05:55:13 UTC
We need to handle the earlier slots somehow.