CVE:CVE-2014-5461
CNNVD:CNNVD-201408-375
Lua是巴西里约热内卢天主教大学的研究小组（由Roberto Ierusalimschy、Waldemar Celes和Luiz Henrique de Figueiredo组成）所开发的一种简洁、轻量、可扩展的脚本语言，它设计目的是为了嵌入到应用程序中，从而为应用程序提供扩展和定制功能。
Lua 5.1版本至5.2.3之前的5.2.x版本中存在缓冲区溢出漏洞。攻击者可借助特制的参数利用该漏洞造成拒绝服务（崩溃）。
solution:Upgrade opensuse opensuse to a higher version than 12.3,13.1,and avoid the version 12.3,13.1; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,and avoid the version 12.04,14.04; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade lua lua to a higher version than 5.1,5.1.1,5.1.2,5.1.3,5.1.4,5.1.5,5.2.0,5.2.1,5.2.2,and avoid the version 5.1,5.1.1,5.1.2,5.1.3,5.1.4,5.1.5,5.2.0,5.2.1,5.2.2; Upgrade mageia mageia to a higher version than 3.0,4.0,and avoid the version 3.0,4.0