CVE-2020-15888

Buffer Overflow in conan/lua

Identifiers

CVE-2020-15888

Package Slug

conan/lua

Vulnerability

Buffer Overflow

Description

Lua mishandles the interaction between stack resizes and garbage collection, leading to a heap-based buffer overflow, heap-based buffer over-read, or use-after-free.

Affected Versions

All versions up to 5.4.0

Solution

Upgrade to version 5.4.1 or above.

Last Modified

2020-07-27

source