alpine · CVE-2020-15890

Quick triage

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2020-15890: 1 source package rows (luajit); 1 state rows across 1 repos (edge-main); fixed 1, open 0.

Description:

LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.