mruby 资源管理错误漏洞

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in Mruby 2.1.2, which stems from the fact that Mruby has a double free in the default allocf of the MRB.No details of the vulnerability are provided at this time...

[ASA-202107-10] mruby: arbitrary code execution

Arch Linux Security Advisory ASA-202107-10 ========================================== Severity: Medium Date : 2021-07-01 CVE-ID : CVE-2020-36401 Package : mruby Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2116 Summary ======= The package mruby before...

PT-2021-6558

Name of the Vulnerable Software and Affected Versions mruby versions 2.1.2 Description The issue is related to a double free vulnerability in the mrb default allocf function of the mruby interpreter. This vulnerability can be exploited by a remote attacker to access sensitive data, compromise dat...

double free vulnerabliity

mruby 2.1.2 has a double free in mrbdefaultallocf called from mrbfree and objfree...

Security update for nghttp2 (moderate)

openSUSE Security Update: Security update for nghttp2 Announcement ID: openSUSE-SU-2021:0341-1 Rating: moderate References: 1159003 1166481 Cross-References: CVE-2019-18802 CVSS scores: CVE-2019-18802 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-18802 SUSE: 7.5...

Buffer Overflow

mruby is vulnerable to buffer overflow. The vulnerability exist because of incorrect VM stack handling...

mruby buffer overflow vulnerability (CNVD-2020-42943)

mruby is a lightweight implementation of the Ruby language. A buffer overflow vulnerability exists in the 'mrbyieldwithclass' function in the vm.c file in mruby 2.1.2-rc and earlier. The vulnerability stems from a networked system or product performing operations in memory without properly...

DEBIAN-CVE-2020-15866

mruby through 2.1.2-rc has a heap-based buffer overflow in the mrbyieldwithclass function in vm.c because of incorrect VM stack handling. It can be triggered via the stackcopy function...

CVE-2020-15866

mruby through 2.1.2-rc has a heap-based buffer overflow in the mrbyieldwithclass function in vm.c because of incorrect VM stack handling. It can be triggered via the stackcopy function...

CVE-2020-15866

mruby through 2.1.2-rc has a heap-based buffer overflow in the mrbyieldwithclass function in vm.c because of incorrect VM stack handling. It can be triggered via the stackcopy function...

UBUNTU-CVE-2020-15866

mruby through 2.1.2-rc has a heap-based buffer overflow in the mrbyieldwithclass function in vm.c because of incorrect VM stack handling. It can be triggered via the stackcopy function...

CVE-2020-15866

mruby through 2.1.2-rc has a heap-based buffer overflow in the mrbyieldwithclass function in vm.c because of incorrect VM stack handling. It can be triggered via the stackcopy function...

Heap overflow

mruby through 2.1.2-rc has a heap-based buffer overflow in the mrbyieldwithclass function in vm.c because of incorrect VM stack handling. It can be triggered via the stackcopy function...

CVE-2020-15866

mruby through 2.1.2-rc has a heap-based buffer overflow in the mrbyieldwithclass function in vm.c because of incorrect VM stack handling. It can be triggered via the stackcopy function...

CVE-2020-15866

CVE-2020-15866 affects mruby up to version 2.1.2-rc, due to a heap-based buffer overflow in the mrb_yield_with_class function in vm.c caused by incorrect VM stack handling. The overflow can be triggered via the stack_copy path. This vulnerability is classified with very high severity (CVSSv3.1: C...

CVE-2020-15866

mruby through 2.1.2-rc has a heap-based buffer overflow in the mrbyieldwithclass function in vm.c because of incorrect VM stack handling. It can be triggered via the stackcopy function...

Heap buffer overflow in mruby interpreter

muby through 2.1.2-rc has a heap-based buffer overflow in the mrbyieldwithclass function in vm.c because of incorrect VM stack handling. It can be triggered via the stackcopy function...

CVE-2020-15866: Out-of-bounds Write

mruby through 2.1.2-rc has a heap-based buffer overflow in the mrbyieldwithclass function in vm.c because of incorrect VM stack handling. It can be triggered via the stackcopy function...

mruby:mruby_proto_fuzzer: Heap-double-free in mrb_default_allocf

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4894663076216832 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyprotofuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x60300001c8a0 Crash...

mruby:mruby_fuzzer: Stack-buffer-overflow in fmt_setup

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5085564041953280 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyfuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffe4fea3241...