CVE:CVE-2021-44647
CNNVD:CNNVD-202201-871
Lua是LUA团队的一款轻量级、扩展的开源脚本语言。
Lua 5.4.4和5.4.2存在安全漏洞，该漏洞源于ldebug.c中funcnamefromcode函数存在类型混淆漏洞，攻击者利用该漏洞导致本地拒绝服务。
solution:Upgrade lua lua to a higher version than 5.4.3,and avoid the version 5.4.3; Upgrade fedoraproject fedora to a higher version than 34,and avoid the version 34