PT-2019-5458 · Lua+9 · Lua+9

Fady Osman · Published 2019-01-10 · Updated 2025-02-03 · CVE-2019-6706

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Lua version 5.3.5

Description The issue is related to a use-after-free in the lua upvaluejoin function in lapi.c, which can be exploited by an attacker to cause a crash. This can be achieved by triggering a debug.upvaluejoin call with specific argument relationships. The vulnerability may allow a remote attacker to cause a denial of service.

Recommendations For Lua version 5.3.5, as a temporary workaround, consider disabling the lua upvaluejoin function in lapi.c until a patch is available. Restrict access to the debug.upvaluejoin call to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2019:3706

ALSA-2019_3706

ALSA-2021_4510

ALSA-2023_0957

ALT-PU-2019-2423

ALT-PU-2019-2424

ALT-PU-2021-2649

AZL-6669

BDU:2020-03180

CESA-2019_3706

CVE-2019-6706

DLA-3469-1

ELSA-2019-3706

OPENSUSE-SU-2019:0175-1

OPENSUSE-SU-2019_0175-1

RHSA-2019:3706

RHSA-2019_3706

RLSA-2019:3706

RLSA-2019_3706

SUSE-SU-2019:0247-1

SUSE-SU-2019_0247-1

USN-3941-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Lua

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 42

• 🔥 https://github.com/Lua-Project/cve-analysis/blob/a43c9ccd00274b31fa2f24c6c8f20ce36655682d/CVE-2019-6706.pdf · Exploit
• 🔥 http://packetstormsecurity.com/files/151335/Lua-5.3.5-Use-After-Free.html · Exploit
• 🔥 http://lua.2524044.n2.nabble.com/Bug-Report-Use-after-free-in-debug-upvaluejoin-tc7685506.html · Exploit
• 🔥 https://exploit-db.com/exploits/46246 · Exploit
• https://github.com/lua/lua/commit/89aee84cbc9224f638f3b7951b306d2ee8ecb71e · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-6706 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3941-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2019:3706 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2019-6706 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-6706 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2019:3706 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3941-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:0247-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6706 · Security Note