980 matches found
Out-of-bounds Read in mrb_get_args
Out-of-bounds Read in mrbgetargs in mruby/mruby Affected commit 3cf291f72224715942beaf8553e42ba8891ab3c6 Proof of Concept ruby= 0..% = 0,0,0,0,0,0,0,0,0,0,0,0,0, = 0 Below is the output from mruby ASAN build: bash= AddressSanitizer:DEADLYSIGNAL...
NULL Pointer Dereference in mrb_vm_exec with super
Description NULL Pointer Dereference in mrbvmexec with super Proof of Concept o13 = Comparable.initialize||0x7f.instanceeval do super rescue caller 0..1.sortby do break end end // PoC.js ./mruby 1.rb Result ASAN:DEADLYSIGNAL =================================================================...
OSV-2022-288 Segv on unknown address in flb_ra_translate
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46082 Crash type: Segv on unknown address Crash state: flbratranslate recordacfuzzer.c...
OSV-2022-276 Segv on unknown address in sc_file_clear_acl_entries
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45969 Crash type: Segv on unknown address Crash state: scfileclearaclentries scfilefree scprofilefree...
OSV-2022-267 Segv on unknown address in flb_sds_copy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45879 Crash type: Segv on unknown address Crash state: flbsdscopy flbparserdecoderdo flbparserlogfmtdo...
OSV-2022-261 Segv on unknown address in flb_ra_create
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45659 Crash type: Segv on unknown address Crash state: flbracreate recordacfuzzer.c...
OSV-2022-257 Segv on unknown address in flb_config_map_properties_check
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45670 Crash type: Segv on unknown address Crash state: flbconfigmappropertiescheck configmapfuzzer.c...
OSV-2022-238 Segv on unknown address in i_zval_ptr_dtor
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45429 Crash type: Segv on unknown address Crash state: izvalptrdtor zendleavehelperSPEC zenddispatchtrycatchfinallyhelperSPEC...
in mruby/mruby
Description commit ecb28f4bf463483cf914c799d086b0cfff997aee Proof of Concept sh ⚡ root@pocas /fuzz/mruby2 master ± echo "P2MKWyoqMCwqKjgsbTowXQSAPRpbAAB7" | base64 -d poc1 ⚡ root@pocas /fuzz/mruby2 master ± ./bin/mruby poc1 AddressSanitizer:DEADLYSIGNAL...
OSV-2022-144 Segv on unknown address in onig_free_body
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44603 Crash type: Segv on unknown address Crash state: onigfreebody onignew flbregexcreate...
Denial Of Service (DoS)
Lua is vulnerable to denial of service. It is affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...
OSV-2022-102 Segv on unknown address in pdfi_array_get
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44151 Crash type: Segv on unknown address Crash state: pdfiarrayget pdfiTJ pdfiinterpretstreamoperator...
CVE-2021-46554
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsjsonstringify at src/mjsjson.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46547
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c17e. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46556
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsbcodeinsertoffset at src/mjsbcode.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46549
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via parsecvaltype at src/mjsffi.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46528
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x5361e. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46531
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8d28e. This vulnerability can lead to a Denial of Service DoS...