An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.
[
{
"source": "https://github.com/lua/lua/commit/42d40581dd919fb134c07027ca1ce0844c670daf",
"id": "CVE-2022-33099-130d0ed2",
"signature_type": "Line",
"target": {
"file": "ldebug.c"
},
"digest": {
"line_hashes": [
"47064890593937786897531178058191810844",
"332134119330750700401512169069853671896",
"265513752968495196327410634712261241495",
"4686135018978641772480404961188955158",
"191357327930270353914184361696403200245"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://github.com/lua/lua/commit/42d40581dd919fb134c07027ca1ce0844c670daf",
"id": "CVE-2022-33099-422ac859",
"signature_type": "Line",
"target": {
"file": "lvm.c"
},
"digest": {
"line_hashes": [
"238664278947635791321220985534781971204",
"110587412781719742331913145596387590167",
"122377330859284596425482454709373106670",
"41978752855376686284244150713173810101",
"244764617910085233208160284415443226461",
"237849260543562680110344945870625485769",
"37562800747512701822999390229154263700",
"219524848240838254345629611037116750206",
"108725855737991599988774000492808822080"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://github.com/lua/lua/commit/42d40581dd919fb134c07027ca1ce0844c670daf",
"id": "CVE-2022-33099-a6a7014b",
"signature_type": "Function",
"target": {
"file": "lvm.c",
"function": "luaV_concat"
},
"digest": {
"function_hash": "144187715496695041250959146983441313261",
"length": 1148.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://github.com/lua/lua/commit/42d40581dd919fb134c07027ca1ce0844c670daf",
"id": "CVE-2022-33099-e7e66be7",
"signature_type": "Function",
"target": {
"file": "ldebug.c",
"function": "luaG_runerror"
},
"digest": {
"function_hash": "281541209982265951639218471101078983413",
"length": 358.0
},
"deprecated": false,
"signature_version": "v1"
}
]