← All advisories

Medium severity5.3NVD Advisory· Published Aug 17, 2020· Updated Jun 17, 2026

CVE-2020-24371

CVE-2020-24371

Description

lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10

Lua/Lua2 versions
cpe:2.3:a:lua:lua:5.4.0:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:lua:lua:5.4.0:-:*:*:*:*:*:*
- (no CPE)range: =5.4.0
Lua/Luadescription
osv-coords7 versions
pkg:bitnami/lua pkg:rpm/opensuse/lua53&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/lua53&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/lua55&distro=openSUSE%20Tumbleweed pkg:rpm/suse/lua53&distro=SUSE%20Linux%20Enterprise%20Micro%205.0 pkg:rpm/suse/lua53&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/lua53&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3
>= 5.4.0, < 5.4.1+ 6 more
- (no CPE)range: >= 5.4.0, < 5.4.1
- (no CPE)range: < 5.3.6-lp152.5.3.1
- (no CPE)range: < 5.3.6-3.6.1
- (no CPE)range: < 5.5.0~beta1-1.1
- (no CPE)range: < 5.3.6-3.6.1
- (no CPE)range: < 5.3.6-3.6.1
- (no CPE)range: < 5.3.6-3.6.1

Patches

Vulnerability mechanics

References

2

github.com/lua/lua/commit/a6da1472c0c5e05ff249325f979531ad51533110nvdPatchThird Party Advisory
www.lua.org/bugs.htmlnvdExploitPatchRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.