CVE-2020-6839

2020-01-1103:15:11

Google

osv.dev

7.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.7%

JSON

In mruby 2.1.0, there is a stack-based buffer overflow in mrb_str_len_to_dbl in string.c.

CPENameOperatorVersion
mrubyeq1.0.0
mrubyeq1.4.0
mrubyeq2.1.0
mrubyeq1.2.0
mrubyeq1.4.1
mrubyeq2.0.1
mrubyeq1.1.0
mrubyeq1.3.0
mrubyeq2.1.0-rc
mrubyeq2.0.0

Name	Operator	Version
mruby	eq	1.0.0
mruby	eq	1.4.0
mruby	eq	2.1.0
mruby	eq	1.2.0
mruby	eq	1.4.1
mruby	eq	2.0.1
mruby	eq	1.1.0
mruby	eq	1.3.0
mruby	eq	2.1.0-rc
mruby	eq	2.0.0

References

github.com/mruby/mruby/issues/4929