PT-2022-3822 · Lua+6 · Lua+6

Roberto-Ieru · Published 2022-02-15 · Updated 2024-07-29 · CVE-2022-28805

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions Lua versions 5.4.0 through 5.4.4

Description The issue is related to a heap-based buffer over-read in the singlevar function in lparser.c of Lua. This might affect systems that compile untrusted Lua code, potentially allowing a remote attacker to execute arbitrary code. The problem is caused by a missing luaK exp2anyregup call.

Recommendations For Lua versions 5.4.0 through 5.4.3, update to version 5.4.4 or later to resolve the issue. For Lua version 5.4.4, although it is mentioned as part of the vulnerable range, the exact fix version is not explicitly stated, but it is implied that updating beyond this version would mitigate the risk. At the moment, there is no information about additional mitigation measures for this specific vulnerability.

Exploit

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2023:2582

ALT-PU-2024-3994

AZL-40812

AZL-9333

BDU:2022-04620

BIT-LUA-2022-28805

CVE-2022-28805

OESA-2022-1632

RHSA-2023:2582

RHSA-2023_2582

USN-6916-1

Affected Products

Alt Linux

Almalinux

Debian

Linuxmint

Lua

Red Hat

Ubuntu

References · 40

• 🔥 https://lua-users.org/lists/lua-l/2022-02/msg00001.html · Exploit
• 🔥 https://lua-users.org/lists/lua-l/2022-04/msg00009.html · Exploit
• 🔥 https://lua-users.org/lists/lua-l/2022-02/msg00070.html · Exploit
• https://github.com/lua/lua/commit/1f3c6f4534c6411313361697d98d1145a1f030fa · Patch
• https://ubuntu.com/security/CVE-2022-33099 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-2582.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJNJ66IFDUKWJJZXHGOLRGIA3HWWC36R · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/692300 · Security Note
• https://osv.dev/vulnerability/AZL-9333 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2582.html · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/677965 · Security Note
• https://security.gentoo.org/glsa/202305-23 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28805 · Security Note
• https://osv.dev/vulnerability/BIT-lua-2022-28805 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2022-28805 · Vendor Advisory