Lucene search
+L

913 matches found

RubySec
RubySec
•added 2023/02/14 12:00 a.m.•31 views

https://github.com/mruby/mruby/issues/5613

An Untrusted Pointer Dereference was discovered in function mrbvmexec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and application crash...

7.5CVSS6.9AI score0.00776EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/14 12:00 a.m.•0 views

CVE-2021-46023: Improper Restriction of Operations within the Bounds of a Memory Buffer

An Untrusted Pointer Dereference was discovered in function mrbvmexec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and application crash...

7.5CVSS5.8AI score0.00776EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/02/14 12:00 a.m.•42 views

CVE-2021-46023

An Untrusted Pointer Dereference was discovered in function mrbvmexec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and application crash...

7.7AI score0.00776EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/02/14 12:00 a.m.•17 views

mruby 缓冲区错误漏洞

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in versions prior to mruby 3.1.0-rc, which stems from an untrusted pointer destructor in the function mrbvmexec, which can be exploited by an attacker to cause a segmentation error and application crash...

7.5CVSS7.2AI score0.00776EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2023/02/14 12:00 a.m.•85 views

CVE-2021-46023

An Untrusted Pointer Dereference was discovered in function mrbvmexec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and application crash...

7.5CVSS7.4AI score0.00776EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2023/02/14 12:00 a.m.•7 views

PT-2023-12564 · Mruby +1 · Mruby +1

Name of the Vulnerable Software and Affected Versions: mruby versions prior to 3.1.0-rc Description: An Untrusted Pointer Dereference was discovered in the mrb vm exec function, causing a segmentation fault and application crash. Recommendations: For versions prior to 3.1.0-rc, update to version...

7.5CVSS7.3AI score0.00776EPSS
SaveExploits1References11
Vulnrichment
Vulnrichment
•added 2023/02/14 12:00 a.m.•4 views

CVE-2021-46023

An Untrusted Pointer Dereference was discovered in function mrbvmexec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and application crash...

7.5AI score0.00776EPSS
SaveExploits1References1
Veracode
Veracode
•added 2022/12/28 6:32 a.m.•21 views

Denial Of Service (DoS)

mruby is vulnerable to denial of service DoS attacks. An untrusted pointer dereference in mrbvmexec may lead to a segmentation fault resulting in an application crash...

7.5CVSS2.8AI score0.01046EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/11/11 12:00 a.m.•12 views

PT-2022-36762 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a negative-size-param, which occurs in the mrb str format function, followed by mrb f sprintf and mrb vm exec. ...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/11/10 12:00 a.m.•13 views

PT-2022-36760 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to an unknown read issue. The crash state includes functions such as pack unpack, mrb pack unpack, and mrb vm exec. Recommendations: At the moment, there is no...

6.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/11/10 12:00 a.m.•10 views

PT-2022-36759 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to an index-out-of-bounds crash. Technical details include the crash type and state, which involve functions such as str init embed, str new, and mrb str new...

6.9AI score
SaveExploits0References2
Veracode
Veracode
•added 2022/11/08 7:05 a.m.•15 views

Denial Of Service (DoS)

mruby is vulnerable to denial of service. The vulnerability exists due to the use after free in mrbvmexec of the library, allowing an attacker to crash the application...

8.2CVSS7.9AI score0.0092EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2022/11/07 3:15 p.m.•24 views

Denial Of Service (DoS)

mruby is vulnerable denial of service. The vulnerability exists in ivfree function of variable.c due to a null pointer dereference which allows an attacker to crash the application via malicious input...

7.5CVSS7.1AI score0.00918EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2022/11/07 12:01 p.m.•20 views

Denial Of Service (DoS)

mruby is vulnerable to denial of service. An attacker can crash the application through the null pointer dereference in the library...

7.5CVSS3.2AI score0.00856EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2022/11/03 3:23 a.m.•32 views

Arbitrary Code Execution

mruby is vulnerable to arbitrary code executions. The vulnerability exists due to out-of-bounds reads in mrbobjiskindof in which allows an attacker to execute arbitrary codes in the system...

7.8CVSS7.9AI score0.00477EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2022/11/02 7:39 a.m.•17 views

Denial Of Service (DoS)

mruby is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference in mrbvmexec which allows an attacker to crash the application...

5.5CVSS5.3AI score0.00827EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2022/11/01 10:54 p.m.•26 views

Denial Of Service (DoS)

mruby is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference in mrbvmexec which allows an attacker to crash the application...

6.5CVSS6AI score0.00369EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
•added 2022/06/06 12:00 a.m.•24 views

Binary vulnerability in mruby

mruby is a lightweight implementation of the Ruby language that runs Ruby code using interpreted mode and executes it in a virtual machine. A binary vulnerability exists in mruby that can be exploited by an attacker to cause a denial of service attack...

7.8CVSS6.8AI score0.00398EPSS
SaveExploits1
CNVD
CNVD
•added 2022/06/01 12:00 a.m.•12 views

Unspecified vulnerability in mruby (CNVD-2022-43225)

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in versions prior to mruby 3.2, which stems from the presence of a post-release reuse issue. No details of the vulnerability are provided at this time...

7.8CVSS7AI score0.00398EPSS
SaveExploits1References1
NVD
NVD
•added 2022/05/31 3:15 a.m.•18 views

CVE-2022-1934

Use After Free in GitHub repository mruby/mruby prior to 3.2...

7.8CVSS0.00398EPSS
SaveExploits1References2
Rows per page
Query Builder