CVE-2014-5461: canonical ubuntu_linux
Vulnerability summary
CVE-2014-5461 is a medium (CVSS 5.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 12.03% chance of exploitation in the next 30 days, higher than 96% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 04-09-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
12.03%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
+0.32 pp
From 11.71% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (openwall.com)
Maturity: unknown
Exploit Reference (openwall.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Mageia5 products
- lua< 5.2.2-1.1.mga3
- lua5.1< 5.1.5-2.2.mga3
- lua< 5.2.2-2.1.mga4
- lua5.1< 5.1.5-4.1.mga4
- mageiaEOL3.0 | 4.0
Debian3 products
- lua5.1< 5.1.5-7 | < 5.1.4-5+deb6u1 | < 5.1.5-4+deb7u1
- lua5.2< 5.2.3-1 | < 5.2.1-3+deb7u1
- debian_linuxEOL7.0
Opensuse2 products
- opensuseEOL12.3 | 13.1
- moarvm&distro=openSUSE Tumbleweed< 2025.05-1.1
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04
Lua1 product
- luaEOL5.1 | 5.1.1 | 5.1.2 | 5.1.3 | 5.1.4 | 5.1.5 | 5.2.0 | 5.2.1 | 5.2.2
Ubuntu1 product
- lua5.1< 5.1.5-5ubuntu0.1
6 vendors · 13 products
References
26 links- security.gentoo.org/glsa/201701-53Vendor Advisory
- secunia.com/advisories/59890Third Party Advisory
- secunia.com/advisories/60869Third Party Advisory
Show all 26 references
- secunia.com/advisories/61411Third Party Advisory
- advisories.mageia.org/MGASA-2014-0414.htmlThird Party Advisory
- security.gentoo.org/glsa/202305-23Vendor Advisory
