LuaJIT Stack-Buffer-Overflow Vulnerability in Error Handling

A stack-buffer-overflow vulnerability has been identified in LuaJIT versions through 2.1. The issue arises in the stack-overflow handler within the file lj_state.c, where improper management of the call stack can lead to out-of-bounds memory access.

Impact

Exploitation of this vulnerability causes a global buffer overflow, which can lead to memory corruption and potentially allow for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by triggering a stack overflow error, which can be done by executing a Lua script that exceeds the maximum stack limit. This will invoke the error handler for stack overflow, where the vulnerability can be exploited by manipulating the error handling process to cause a buffer overflow.

Remediation

Users can upgrade to the patched version of LuaJIT available on the official GitHub repository.