Msrc Cbl2 Lua 5.4.4-1 On Cbl Mariner 2.0 vulnerabilities

1 known vulnerability affecting msrc/cbl2_lua_5.4.4-1_on_cbl_mariner_2.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2021-44964MEDIUMCVSS 6.32022-03-08

CVE-2021-44964 [MEDIUM] CWE-416 Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file. Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?