Lucene search
+L

1186 matches found

CNVD
CNVD
•added 2018/06/06 12:00 a.m.•17 views

mruby Denial of Service Vulnerability (CNVD-2018-14714)

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in the 'initcopy' function of the kernel.c file in mruby version 1.4.1. An attacker can exploit this vulnerability to cause a denial of service uninitialized pointer usage and application crash...

9.8CVSS8.9AI score0.02169EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2018/06/05 1:29 p.m.•22 views

CVE-2018-11743

The initcopy function in kernel.c in mruby 1.4.1 makes initializecopy calls for TTICLASS objects, which allows attackers to cause a denial of service mrbhashkeys uninitialized pointer and application crash or possibly have unspecified other impact...

9.8CVSS9.9AI score0.02169EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2018/06/05 1:29 p.m.•9 views

DEBIAN-CVE-2018-11743

The initcopy function in kernel.c in mruby 1.4.1 makes initializecopy calls for TTICLASS objects, which allows attackers to cause a denial of service mrbhashkeys uninitialized pointer and application crash or possibly have unspecified other impact...

9.8CVSS7.3AI score0.02169EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2018/06/05 1:29 p.m.•20 views

UBUNTU-CVE-2018-11743

The initcopy function in kernel.c in mruby 1.4.1 makes initializecopy calls for TTICLASS objects, which allows attackers to cause a denial of service mrbhashkeys uninitialized pointer and application crash or possibly have unspecified other impact...

9.8CVSS7.3AI score0.02169EPSS
SaveExploits1References3
Prion
Prion
•added 2018/06/05 1:29 p.m.•15 views

Code injection

The initcopy function in kernel.c in mruby 1.4.1 makes initializecopy calls for TTICLASS objects, which allows attackers to cause a denial of service mrbhashkeys uninitialized pointer and application crash or possibly have unspecified other impact...

7.5CVSS9.7AI score0.02169EPSS
SaveExploits1References3Affected Software2
NVD
NVD
•added 2018/06/05 1:29 p.m.•38 views

CVE-2018-11743

The initcopy function in kernel.c in mruby 1.4.1 makes initializecopy calls for TTICLASS objects, which allows attackers to cause a denial of service mrbhashkeys uninitialized pointer and application crash or possibly have unspecified other impact...

9.8CVSS9.8AI score0.02169EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2018/06/05 1:00 p.m.•43 views

CVE-2018-11743

The initcopy function in kernel.c in mruby 1.4.1 makes initializecopy calls for TTICLASS objects, which allows attackers to cause a denial of service mrbhashkeys uninitialized pointer and application crash or possibly have unspecified other impact...

9.8AI score0.02169EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2018/06/05 1:00 p.m.•62 views

CVE-2018-11743

The initcopy function in kernel.c in mruby 1.4.1 makes initializecopy calls for TTICLASS objects, which allows attackers to cause a denial of service mrbhashkeys uninitialized pointer and application crash or possibly have unspecified other impact...

9.8CVSS9.8AI score0.02169EPSS
SaveExploits1
CVE
CVE
•added 2018/06/05 1:00 p.m.•95 views

CVE-2018-11743

CVE-2018-11743 affects mruby 1.4.1. Root cause: in kernel.c, init_copy calls initialize_copy for TT_ICLASS objects. Impact: can cause a denial of service via an uninitialized pointer used by mrb_hash_keys and may have unspecified other impact, including application crash. Exploitation details are...

9.8CVSS9.6AI score0.02169EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2018/06/05 1:00 p.m.•9 views

CVE-2018-11743

The initcopy function in kernel.c in mruby 1.4.1 makes initializecopy calls for TTICLASS objects, which allows attackers to cause a denial of service mrbhashkeys uninitialized pointer and application crash or possibly have unspecified other impact...

9.8CVSS0.02169EPSS
SaveExploits1References4
RubySec
RubySec
•added 2018/06/05 12:00 a.m.•25 views

Use of uninitialized pointer in mrb_hash_keys

The initcopy function in kernel.c in mruby 1.4.1 makes initializecopy calls for TTICLASS objects, which allows attackers to cause a denial of service mrbhashkeys uninitialized pointer and application crash or possibly have unspecified other impact...

9.8CVSS7.4AI score0.02169EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2018/06/05 12:00 a.m.•6 views

PT-2018-10800

Name of the Vulnerable Software and Affected Versions mruby version 1.4.1 Description The issue is related to the init copy function in kernel.c, which makes initialize copy calls for TT ICLASS objects. This allows attackers to cause a denial of service, resulting in an uninitialized pointer and...

9.8CVSS0.02169EPSS
SaveExploits1References25
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/05 12:00 a.m.•5 views

CVE-2018-11743: Access of Uninitialized Pointer

The initcopy function in kernel.c in mruby 1.4.1 makes initializecopy calls for TTICLASS objects, which allows attackers to cause a denial of service mrbhashkeys uninitialized pointer and application crash or possibly have unspecified other impact...

9.8CVSS8.1AI score0.02169EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/04/19 12:00 a.m.•20 views

mruby integer overflow vulnerability

mruby is a lightweight implementation of the Ruby language. An integer overflow vulnerability exists in the 'mrbvmexec' function in src/vm.c in mruby 1.4.0 and earlier. An attacker can exploit this vulnerability to execute arbitrary code memory misreference...

9.8CVSS8.6AI score0.02588EPSS
SaveExploits1References1
Prion
Prion
•added 2018/04/18 3:29 p.m.•28 views

Design/Logic Flaw

In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::Fileinitilializecopy. An attacker that can cause Ruby code to be run can possibly use this to execute arbitrary code...

7.5CVSS9.7AI score0.02264EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2018/04/18 3:29 p.m.•33 views

CVE-2018-10199

In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::Fileinitilializecopy. An attacker that can cause Ruby code to be run can possibly use this to execute arbitrary code...

9.8CVSS7.9AI score0.02264EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2018/04/18 3:29 p.m.•27 views

DEBIAN-CVE-2018-10199

In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::Fileinitilializecopy. An attacker that can cause Ruby code to be run can possibly use this to execute arbitrary code...

9.8CVSS8.5AI score0.02264EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2018/04/18 3:29 p.m.•31 views

UBUNTU-CVE-2018-10199

In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::Fileinitilializecopy. An attacker that can cause Ruby code to be run can possibly use this to execute arbitrary code...

9.8CVSS8.5AI score0.02264EPSS
SaveExploits0References4
NVD
NVD
•added 2018/04/18 3:29 p.m.•32 views

CVE-2018-10199

In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::Fileinitilializecopy. An attacker that can cause Ruby code to be run can possibly use this to execute arbitrary code...

9.8CVSS9.8AI score0.02264EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2018/04/18 3:00 p.m.•48 views

CVE-2018-10199

In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::Fileinitilializecopy. An attacker that can cause Ruby code to be run can possibly use this to execute arbitrary code...

9.8CVSS8.5AI score0.02264EPSS
SaveExploits0
Rows per page
Query Builder