CVE-2014-5461

Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments.

• CWE-119

• http://advisories.mageia.org/MGASA-2014-0414.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-09/msg00030.htmlThird Party Advisory
• http://secunia.com/advisories/59890
• http://secunia.com/advisories/60869
• http://secunia.com/advisories/61411
• http://www.debian.org/security/2014/dsa-3015Third Party Advisory
• http://www.debian.org/security/2014/dsa-3016Third Party Advisory
• http://www.lua.org/bugs.html#5.2.2-1Patch, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:144Broken Link
• http://www.openwall.com/lists/oss-security/2014/08/21/1Exploit, Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/08/21/4Exploit, Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/08/27/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/69342Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2338-1Third Party Advisory
• https://security.gentoo.org/glsa/201701-53
• https://security.gentoo.org/glsa/202305-23
• http://advisories.mageia.org/MGASA-2014-0414.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-09/msg00030.htmlThird Party Advisory
• http://secunia.com/advisories/59890
• http://secunia.com/advisories/60869
• http://secunia.com/advisories/61411
• http://www.debian.org/security/2014/dsa-3015Third Party Advisory
• http://www.debian.org/security/2014/dsa-3016Third Party Advisory
• http://www.lua.org/bugs.html#5.2.2-1Patch, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:144Broken Link
• http://www.openwall.com/lists/oss-security/2014/08/21/1Exploit, Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/08/21/4Exploit, Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/08/27/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/69342Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2338-1Third Party Advisory
• https://security.gentoo.org/glsa/201701-53
• https://security.gentoo.org/glsa/202305-23

Published

Sep 4, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-5455Unquoted Windows search path vulnerability in the ptservice …5.3
• CVE-2014-5456Cross-site scripting (XSS) vulnerability in the Social Stats…
• CVE-2014-5457QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS…
• CVE-2014-5458SQL injection vulnerability in sqrl_verify.php in php-sqrl a…
• CVE-2014-5459The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0…
• CVE-2014-5460Unrestricted file upload vulnerability in the Tribulant Slid…
• CVE-2014-5462Multiple SQL injection vulnerabilities in OpenEMR 4.1.2 (Pat…
• CVE-2014-5464Cross-site scripting (XSS) vulnerability in the nDPI traffic…
• CVE-2014-5465Directory traversal vulnerability in force-download.php in t…
• CVE-2014-5466Cross-site scripting (XSS) vulnerability in the Dashboard in…
• CVE-2014-5468A File Inclusion vulnerability exists in Railo 4.2.1 and ear…8.8
• CVE-2014-5470Actual Analyzer through 2014-08-29 allows code execution via…9.8