CVE-2019-6706

HIGH EPSS 96.7%
Published Jan 23, 20197y ago · Modified Jun 17, 20262w ago
7.5 CVSS 3.1
High
Find Similar
Published Jan 23, 2019 7y ago
Last Modified Jun 17, 2026 2w ago

Description

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

CVSS Details

Base Score
7.5
Exploitability
3.9
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
96.7% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 4

VendorProductVersionRange
lualua5.3.5any
canonicalubuntu_linux16.04any
canonicalubuntu_linux18.04any
canonicalubuntu_linux18.10any

References 6

  • lua-users.org http://lua-users.org/lists/lua-l/2019-01/msg00039.html
    Broken Link
  • packetstormsecurity.com http://packetstormsecurity.com/files/151335/Lua-5.3.5-Use-After-Free.html
    ExploitThird Party AdvisoryVDB Entry
  • access.redhat.com https://access.redhat.com/security/cve/cve-2019-6706
    Third Party Advisory
  • github.com https://github.com/Lua-Project/cve-analysis/blob/a43c9ccd00274b31fa2f24c6c8f20ce36655682d/CVE-2019-6706.pdf
    ExploitThird Party Advisory
  • github.com https://github.com/lua/lua/commit/89aee84cbc9224f638f3b7951b306d2ee8ecb71e
    PatchThird Party Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2023/06/msg00031.html

Remediation

  • github.com https://github.com/lua/lua/commit/89aee84cbc9224f638f3b7951b306d2ee8ecb71e
    PatchThird Party Advisory