mruby buffer overflow vulnerability (CNVD-2020-42943)

mruby is a lightweight implementation of the Ruby language. A buffer overflow vulnerability exists in the 'mrbyieldwithclass' function in the vm.c file in mruby 2.1.2-rc and earlier. The vulnerability stems from a networked system or product performing operations in memory without properly...

DEBIAN-CVE-2020-15866

mruby through 2.1.2-rc has a heap-based buffer overflow in the mrbyieldwithclass function in vm.c because of incorrect VM stack handling. It can be triggered via the stackcopy function...

shopify-scripts: SIGSEGV - mrb_yield_with_class

Linux Ubuntu Xenial X64 commit 63dbed00946afda34178a479cfa38fa78d620a00 Author: Yukihiro "Matz" Matsumoto Date: Tue Mar 7 15:01:09 2017 +0900 PoC def a instanceexec return aensure end a output ----------------------------------registers----------------------------------- RAX: 0x7ffff7fec7d0 RBX:...