809 matches found
mruby 资源管理错误漏洞
mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in the GitHub repository mruby/mruby versions prior to 3.2, which stems from a heap buffer overflow in mrbvmexec in mruby/mruby. An attacker could exploit this vulnerability to execute arbitrary code...
CVE-2022-1071
User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...
DEBIAN-CVE-2022-1071
User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...
CVE-2022-1071
User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...
CVE-2022-1071
User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...
Design/Logic Flaw
User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...
UBUNTU-CVE-2022-1071
User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...
CVE-2022-1071
User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...
CVE-2022-1071 User after free in mrb_vm_exec in mruby/mruby
User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...
CVE-2022-1071 User after free in mrb_vm_exec in mruby/mruby
User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...
CVE-2022-1071
User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...
CVE-2022-1071
CVE-2022-1071 affects mruby/mruby prior to 3.2. The issue is a use-after-free in mrb_vm_exec, as documented in multiple sources (e.g., NVD/NIST entry). CVSSv3.1/base scores indicate HIGH severity (8.2) with LOCAL exploitability, low privileges required, UI interaction required, and CHANGED scope,...
mruby 资源管理错误漏洞
mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in mruby 3.1 and earlier, which stems from post-release reuse in mrbvmexec. No details of the vulnerability are provided at this time...
User after free in mrb_vm_exec in mruby/mruby
User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...
use after free in mrb_vm_exec
While fuzzing mruby I found a use after free in mruby compiled with ASAn. Proof of Concept uaf5.rb rb...
User after free in mrb_vm_exec
While fuzzing mruby I found a use after free in mruby compiled with ASAn. Proof of Concept uaf1.rb rb var1 = -0 var2 = 1.0 var3 = 1 var4 = +0 var3 = methods.groupby || var3 = methods.groupby || var3 = methods.groupby || var3 = methods.groupby || var3 = methods.groupby || var3 = methods.groupby ||...
mruby buffer overflow vulnerability (CNVD-2022-20682)
mruby is a lightweight implementation of the Ruby language. mruby suffers from a buffer overflow vulnerability that stems from the presence of null pointer dereference in mruby, which could be exploited by an attacker to crash the mruby interpreter, thereby impacting system availability...
CVE-2022-0890
NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2...