mruby Denial of Service Vulnerability (CNVD-2018-12148)

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in the 'mrbclassreal' function in mruby version 1.4.1, which stems from the program failing to properly support 'BasicObject'. An attacker can exploit this vulnerability to cause a denial of service crash...

DEBIAN-CVE-2018-12249

An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrbclassreal because "class BasicObject" is not properly supported in class.c...