CVE-2024-25177

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS...

Original description

The description as published by the source.

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2024-25177 luajit Fixed in: 2.1_p20240815-r1
Debian DEBIAN-CVE-2024-25177 luajit Fixed in: 2.1.0~beta3+dfsg-5.3+deb11u1
Ubuntu UBUNTU-CVE-2024-25177 luajit

References

advisory github.com
advisory nvd.nist.gov
patch github.com
patch github.com
report github.com
web gist.github.com
web lists.debian.org