Msrc Cm1 Lua 5.3.5-7 On Cbl Mariner 1.0 vulnerabilities

1 known vulnerability affecting msrc/cm1_lua_5.3.5-7_on_cbl_mariner_1.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2020-15889CRITICALCVSS 9.82020-07-14

CVE-2020-15889 [CRITICAL] CWE-125 Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members. Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to