Heap-based buffer overflow in Lua - CVE-2022-28805

Detailed vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the singlevar function in lparser.c. A remote attacker can use a specially crafted luaK_exp2anyregup call, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

How to mitigate CVE-2022-28805

Sources

• https://lua-users.org/lists/lua-l/2022-02/msg00001.html
• https://lua-users.org/lists/lua-l/2022-02/msg00070.html
• https://lua-users.org/lists/lua-l/2022-04/msg00009.html
• https://github.com/lua/lua/commit/1f3c6f4534c6411313361697d98d1145a1f030fa