CVE-2019-6706

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-6706
Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://lua-users.org/lists/lua-l/2019-01/msg00039.html Broken Link
http://packetstormsecurity.com/files/151335/Lua-5.3.5-Use-After-Free.html Exploit Third Party Advisory VDB Entry
https://access.redhat.com/security/cve/cve-2019-6706 Third Party Advisory
https://github.com/Lua-Project/cve-analysis/blob/a43c9ccd00274b31fa2f24c6c8f20ce36655682d/CVE-2019-6706.pdf Exploit Third Party Advisory
https://github.com/lua/lua/commit/89aee84cbc9224f638f3b7951b306d2ee8ecb71e Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/06/msg00031.html
Configurations

Configuration 1 (hide)

cpe:2.3:a:lua:lua:5.3.5:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
History

08 Nov 2022, 13:18

Type Values Removed Values Added
References (MISC) https://github.com/Lua-Project/cve-analysis/blob/a43c9ccd00274b31fa2f24c6c8f20ce36655682d/CVE-2019-6706.pdf - (MISC) https://github.com/Lua-Project/cve-analysis/blob/a43c9ccd00274b31fa2f24c6c8f20ce36655682d/CVE-2019-6706.pdf - Exploit, Third Party Advisory
References (MISC) http://lua-users.org/lists/lua-l/2019-01/msg00039.html - (MISC) http://lua-users.org/lists/lua-l/2019-01/msg00039.html - Broken Link
References (MISC) https://access.redhat.com/security/cve/cve-2019-6706 - (MISC) https://access.redhat.com/security/cve/cve-2019-6706 - Third Party Advisory
References (MISC) https://github.com/lua/lua/commit/89aee84cbc9224f638f3b7951b306d2ee8ecb71e - (MISC) https://github.com/lua/lua/commit/89aee84cbc9224f638f3b7951b306d2ee8ecb71e - Patch, Third Party Advisory
References (MISC) http://packetstormsecurity.com/files/151335/Lua-5.3.5-Use-After-Free.html - (MISC) http://packetstormsecurity.com/files/151335/Lua-5.3.5-Use-After-Free.html - Exploit, Third Party Advisory, VDB Entry

18 Oct 2022, 22:15

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/errata/RHSA-2019:3706', 'name': 'RHSA-2019:3706', 'tags': [], 'refsource': 'REDHAT'}
  • {'url': 'https://www.exploit-db.com/exploits/46246/', 'name': '46246', 'tags': ['Exploit', 'Patch', 'Third Party Advisory', 'VDB Entry'], 'refsource': 'EXPLOIT-DB'}
  • {'url': 'http://lua.2524044.n2.nabble.com/Bug-Report-Use-after-free-in-debug-upvaluejoin-tc7685506.html', 'name': 'http://lua.2524044.n2.nabble.com/Bug-Report-Use-after-free-in-debug-upvaluejoin-tc7685506.html', 'tags': ['Issue Tracking', 'Exploit', 'Third Party Advisory'], 'refsource': 'MISC'}
  • {'url': 'https://usn.ubuntu.com/3941-1/', 'name': 'USN-3941-1', 'tags': ['Third Party Advisory'], 'refsource': 'UBUNTU'}
  • (MISC) https://github.com/Lua-Project/cve-analysis/blob/a43c9ccd00274b31fa2f24c6c8f20ce36655682d/CVE-2019-6706.pdf -
  • (MISC) http://lua-users.org/lists/lua-l/2019-01/msg00039.html -
  • (MISC) http://packetstormsecurity.com/files/151335/Lua-5.3.5-Use-After-Free.html -
  • (MISC) https://access.redhat.com/security/cve/cve-2019-6706 -
  • (MISC) https://github.com/lua/lua/commit/89aee84cbc9224f638f3b7951b306d2ee8ecb71e -
Information

Published : 2019-01-23 19:29

Updated : 2024-02-04 20:03

NVD link : CVE-2019-6706

Mitre link : CVE-2019-6706

CVE.ORG link : CVE-2019-6706

JSON object : View

Products Affected

lua

  • lua

canonical

  • ubuntu_linux
CWE
CWE-416

Use After Free