[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXHxSkaOKbtshCAOMlG88spkbKDfEdnfodSHbyUadM9U":3,"g5a-risk:CVE-2022-28805":148},{"success":4,"data":5,"meta":146},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":43,"affectedProducts":44,"affectedProductsCount":57,"references":58,"referencesCount":88,"weaknesses":89,"weaknessesCount":98,"isActivelyExploited":99,"cisaInfo":27,"otxData":27,"relatedBlogPosts":100,"seoMetadata":101,"configurations":126,"relatedVendorCves":144,"notableEvents":145},"CVE-2022-28805","What is CVE-2022-28805?","singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.","singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read...","2022-04-08T06:15:07.243","2024-06-20T14:44:42.22",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.2,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:P","PARTIAL",6.4,"MEDIUM",10,4.9,0.02976,[42,42,42,42,42,42,40],0.03,"Critical",[45,49,54],{"vendor":46,"product":46,"version":47,"criteria":48,"vulnerable":4},"lua","*","cpe:2.3:a:lua:lua:*:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"fedoraproject","fedora","35","cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":55,"criteria":56,"vulnerable":4},"36","cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",3,[59,65,69,72,78,81,84],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fgithub.com\u002Flua\u002Flua\u002Fcommit\u002F1f3c6f4534c6411313361697d98d1145a1f030fa","GitHub",[63,64],"Patch","Third Party Advisory",{"url":66,"source":67,"tags":68},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FRJNJ66IFDUKWJJZXHGOLRGIA3HWWC36R\u002F","Fedoraproject",[64],{"url":70,"source":67,"tags":71},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FUHYZOEFDVLVAD6EEP4CDW6DNONIVVHPA\u002F",[64],{"url":73,"source":74,"tags":75},"https:\u002F\u002Flua-users.org\u002Flists\u002Flua-l\u002F2022-02\u002Fmsg00001.html","Lua-users",[76,77,64],"Exploit","Mailing List",{"url":79,"source":74,"tags":80},"https:\u002F\u002Flua-users.org\u002Flists\u002Flua-l\u002F2022-02\u002Fmsg00070.html",[76,77,64],{"url":82,"source":74,"tags":83},"https:\u002F\u002Flua-users.org\u002Flists\u002Flua-l\u002F2022-04\u002Fmsg00009.html",[76,77,64],{"url":85,"source":86,"tags":87},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202305-23","Gentoo",[64],7,[90],{"id":91,"name":92,"description":93,"extendedDescription":94,"status":95,"abstraction":96,"structure":97},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":102,"metaDescription":103,"keywords":104,"canonicalUrl":105,"structuredData":106},"What is CVE-2022-28805? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-28805, a critical severity cyber security vulnerability from 2022. singlevar in lparser.c in Lua from (including) 5.4.0 up...","CVE-2022-28805, CVE-2022-28805 vulnerability, CVE-2022-28805 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, lua security, fedoraproject security, lua vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2022-28805",{"@context":107,"@type":108,"headline":102,"description":103,"datePublished":10,"dateModified":11,"author":109,"publisher":113,"about":117,"mainEntityOfPage":121,"articleSection":124,"keywords":125},"https:\u002F\u002Fschema.org","TechArticle",{"@type":110,"name":111,"url":112},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":110,"name":111,"url":112,"logo":114},{"@type":115,"url":116},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":118,"name":6,"description":119,"additionalType":120},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":122,"@id":123},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-28805","Cybersecurity","CVE-2022-28805, CVE-2022-28805 vulnerability, CVE-2022-28805 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[127,136],{"Operator":27,"Negate":27,"Nodes":128},[129],{"Operator":130,"Negate":27,"CPEMatch":131},"OR",[132],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":133,"VersionStartExcluding":27,"VersionStartIncluding":134,"VersionEndExcluding":135,"VersionEndIncluding":27},"57801ACF-A19D-4A5B-8189-BAEE33E23BA3","5.4.0","5.4.5",{"Operator":27,"Negate":27,"Nodes":137},[138],{"Operator":130,"Negate":27,"CPEMatch":139},[140,142],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":141,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"80E516C0-98A4-4ADE-B69F-66A772E2BAAA",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",[],[],{"lastModified":11,"cacheTime":147,"version":33},1792249186947,{"score":149,"band":150,"action":151,"scoredAt":152},53,"Medium","Plan remediation","2026-10-16T06:54:05.565429+00:00"]