Lucene search

K
osvGoogleOSV:CVE-2017-9527
HistoryJun 11, 2017 - 5:29 p.m.

CVE-2017-9527

2017-06-1117:29:00
Google
osv.dev
1

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.8%

The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service (heap-based use-after-free and application crash) or possibly have unspecified other impact via a crafted .rb file.

CPENameOperatorVersion
mrubyeq1.1.0
mrubyeq1.2.0
mrubyeq1.0.0

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.8%