CVE-2018-12249

Summary of CVE-2018-12249 : The issue is in mruby 1.4.1, causing a NULL pointer dereference in function mrb_class_real due to improper support for the object literal "BasicObject" in class.c . This is a vulnerability in the mruby interpreter affecting code paths that interact with BasicObject sem...

CVE-2018-12249

An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrbclassreal because "class BasicObject" is not properly supported in class.c...

CVE-2018-12249

An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrbclassreal because "class BasicObject" is not properly supported in class.c...

CVE-2018-12249

An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrbclassreal because "class BasicObject" is not properly supported in class.c...

CVE-2018-12248

An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OPENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to fiber...

CVE-2018-12247

CVE-2018-12247 affects mruby 1.4.1. The issue is a NULL pointer dereference in mrb_class caused by certain .clone usage, where mrb_obj_clone in kernel.c copies flags other than MRB_FLAG_IS_FROZEN (e.g., the embedded flag). This can lead to crashes when the affected path is triggered. Connected so...

CVE-2018-12248

The CVE-2018-12248 entry concerns mruby 1.4.1, where a heap-based buffer over-read occurs in the OP_ENTER path when fiber is invoked with many arguments. The underlying cause is that mrbgems/mruby-fiber/src/fiber.c does not extend the stack sufficiently for large argument lists. Affects mruby 1.4...

CVE-2018-12247

An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrbclass, related to certain .clone usage, because mrbobjclone in kernel.c copies flags other than the MRBFLAGISFROZEN flag e.g., the embedded flag...

CVE-2018-12248

An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OPENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to fiber...

CVE-2018-12247

An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrbclass, related to certain .clone usage, because mrbobjclone in kernel.c copies flags other than the MRBFLAGISFROZEN flag e.g., the embedded flag...

CVE-2018-12248

An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OPENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to fiber...

PT-2018-11074

Name of the Vulnerable Software and Affected Versions mruby version 1.4.1 Description An issue was discovered related to a NULL pointer dereference in mrb class. This issue is connected to certain usage of .clone, as mrb obj clone in kernel.c copies flags other than the MRB FLAG IS FROZEN flag,...

Null pointer dereference in mrb_class

An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrbclass, related to certain .clone usage, because mrbobjclone in kernel.c copies flags other than the MRBFLAGISFROZEN flag e.g., the embedded flag...

Heap buffer overflow in OP_ENTER

An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OPENTER because a heap-based mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to fiber...

PT-2018-11076

Name of the Vulnerable Software and Affected Versions mruby version 1.4.1 Description An issue was discovered in mruby. There is a NULL pointer dereference in mrb class real because class BasicObject is not properly supported in class.c. Recommendations For mruby version 1.4.1, at the moment, the...

CVE-2018-12249: NULL Pointer Dereference

An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrbclassreal because "class BasicObject" is not properly supported in class.c...

Null pointer dereference in mrb_class_real

An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrbclassreal because "class BasicObject" is not properly supported in class.c...

PT-2018-11075

Name of the Vulnerable Software and Affected Versions mruby version 1.4.1 Description A heap-based buffer over-read issue was found, associated with OP ENTER, due to the failure of mrbgems/mruby-fiber/src/fiber.c to extend the stack when handling many arguments to fiber. Recommendations For mruby...

CVE-2018-12247: NULL Pointer Dereference

An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrbclass, related to certain .clone usage, because mrbobjclone in kernel.c copies flags other than the MRBFLAGISFROZEN flag e.g., the embedded flag...

CVE-2018-12248: Out-of-bounds Read

An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OPENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to fiber...