Overview

The vulnerability identified as CVE-2024-25177 is a critical flaw in LuaJIT through version 2.1. This flaw can lead to a Denial of Service (DoS) attack due to an unsinking of IR_FSTORE for NULL metatable. It is a significant problem as it potentially compromises system security and data integrity, making affected systems prone to data leakage.

Vulnerability Summary

CVE ID: CVE-2024-25177
Severity: High (7.5 CVSS score)
Attack Vector: Network
Privileges Required: None
User Interaction: None
Impact: Denial of Service, potential system compromise, and data leakage

Affected Products

Product | Affected Versions

LuaJIT | Up to 2.1

How the Exploit Works

The exploit works by taking advantage of an unsinking of IR_FSTORE for NULL metatables in LuaJIT. An attacker can send specially-crafted packets to the vulnerable system, causing the system to crash or become unresponsive. This situation can lead to potential system compromise or data leakage if left unmitigated.

Conceptual Example Code

The following is a conceptual example of how the vulnerability might be exploited. This example does not represent a real exploit but is indicative of how an attacker might trigger the vulnerability.

-- Conceptual LuaJIT exploit code
local malicious_table = {}
setmetatable(malicious_table, nil) -- Set metatable to NULL
-- The following line attempts to unsink IR_FSTORE, leading to DoS
malicious_table["trigger_vulnerability"] = "Exploit CVE-2024-25177"

In this conceptual example, the attacker creates a Lua table with a NULL metatable, then attempts to unsink IR_FSTORE, leading to a Denial of Service.

Mitigation Guidance

To mitigate this vulnerability, users are advised to apply the latest vendor-provided patch that addresses this issue. If a patch is not immediately available, implementing a Web Application Firewall (WAF) or Intrusion Detection System (IDS) can provide temporary protection by blocking malicious traffic that attempts to exploit this vulnerability.