CVE-2020-6840

2020-01-1103:15:11

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.7%

JSON

In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c.

CPENameOperatorVersion
mrubyeq1.0.0
mrubyeq1.4.0
mrubyeq2.1.0
mrubyeq1.2.0
mrubyeq1.4.1
mrubyeq2.0.1
mrubyeq1.1.0
mrubyeq1.3.0
mrubyeq2.1.0-rc
mrubyeq2.0.0

Name	Operator	Version
mruby	eq	1.0.0
mruby	eq	1.4.0
mruby	eq	2.1.0
mruby	eq	1.2.0
mruby	eq	1.4.1
mruby	eq	2.0.1
mruby	eq	1.1.0
mruby	eq	1.3.0
mruby	eq	2.1.0-rc
mruby	eq	2.0.0

References

github.com/mruby/mruby/issues/4927