Vulnerability Name:

CCN-49434

Published:2009-03-04
Updated:2009-03-04
Summary:An unspecified vulnerability in Lua related to the bytecode verifier has an unknown impact and attack vector.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.5 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:U/RL:U/RC:UR)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Consequences:Other
References:Source: CCN
Type: lua-l Mailing List, Wed, 4 Mar 2009 15:58:22 -0300
future of bytecode verifier

Source: CCN
Type: Lua Web site
The Programming Language Lua

Source: CCN
Type: oss-security Mailing List, Wed, 25 Mar 2009 09:29:22 +0100
Re: Lua 5.1.4

Source: CCN
Type: BID-34237
Lua Unspecified Bytecode Verifier Security Vulnerability

Source: XF
Type: UNKNOWN
lua-bytecode-unspecified(49434)

Vulnerable Configuration:Configuration CCN 1:
  • cpe:/a:lua:lua:5.1.4:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    lua lua 5.1.4