PT-2022-13775

Name of the Vulnerable Software and Affected Versions mruby versions prior to 3.2 Description A heap-buffer-overflow issue exists in the mrb vm exec function of mruby. This could potentially allow for arbitrary code execution if exploited. Recommendations For versions prior to 3.2, update to...

DEBIAN-CVE-2022-1201

NULL Pointer Dereference in mrbvmexec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is capable of making the mruby interpreter crash, thus affecting the availability of the system...

PT-2022-13708 · Mruby +1 · Mruby +1

Name of the Vulnerable Software and Affected Versions: mruby versions prior to 3.2 Description: The issue is related to a NULL Pointer Dereference in mrb vm exec with super, which can cause the mruby interpreter to crash. This affects the availability of the system. Recommendations: For versions...

UBUNTU-CVE-2022-1106

use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

PT-2022-13664

Name of the Vulnerable Software and Affected Versions mruby versions prior to 3.2 Description The issue is related to a use after free in mrb vm exec. Recommendations For versions prior to 3.2, update to version 3.2 or later to resolve the issue...

PT-2022-13633

Name of the Vulnerable Software and Affected Versions mruby versions prior to 3.2 Description The issue is related to a user after free in mrb vm exec. This problem affects the mruby GitHub repository. Recommendations For versions prior to 3.2, update to version 3.2 or later to resolve the issue...

mruby 资源管理错误漏洞

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in mruby 3.1 and earlier, which stems from post-release reuse in mrbvmexec. No details of the vulnerability are provided at this time...

CVE-2021-46020

An untrusted pointer dereference in mrbvmexec of mruby v3.0.0 can lead to a segmentation fault or application crash...

PT-2022-12506

Name of the Vulnerable Software and Affected Versions mruby version 3.0.0 Description The issue is related to an untrusted pointer dereference in the mrb vm exec function, which can cause a segmentation fault or application crash. Recommendations For mruby version 3.0.0, at the moment, there is n...

PT-2021-27850

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A heap-buffer-overflow WRITE 8 crash has been reported. The crash occurs in the following functions: mrb vm exec, mrb vm run, mrb top run. Recommendations...

Heap-based Buffer Overflow in mruby/mruby

Description Heap buffer overflow on mrb-vm-exec Proof of Concept // poc.rb 1.timesuntil% ;break Result ./mruby poc.rb ================================================================= ==1451==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6020000023d9 at pc 0x55b2fc3f1046 bp...

PT-2021-27799

Name of the Vulnerable Software and Affected Versions Mruby affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the mrb vm exec, mrb vm run, and mrb top run functions. Recommendations At the moment, there is no...

PT-2021-27752

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves several functions: mrb vm exec, mrb vm run, and mrb top run. No informati...

PT-2021-27665

Name of the Vulnerable Software and Affected Versions: Mruby affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the mrb vm exec, mrb vm run, and mrb top run functions. Recommendations: At the moment, there is...

PT-2021-28326

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash occurs in the following functions: mrb vm exec, mrb vm run, mrb top run. Recommendations...

PT-2021-28328

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported with a type of UNKNOWN READ. The crash state includes functions such as mrb vm ci env, cipop, and mrb vm exec. No information i...

PT-2021-28300

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a negative-size-param, which occurs in the mrb str format function, called by mrb f sprintf and mrb vm exec...

PT-2021-28277

Name of the Vulnerable Software and Affected Versions: MRuby affected versions not specified Description: The issue is related to a crash caused by an unknown read. Technical details about the crash include the involvement of specific functions such as mrb ary shift m, mrb vm exec, and mrb vm run...

PT-2020-22248

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves several functions: ht copy, mrb hash dup, and mrb vm exec. No...

PT-2018-9744

Name of the Vulnerable Software and Affected Versions: mruby versions prior to 1.4.1 Description: The issue is related to an integer overflow in the mrb vm exec function when handling OP GETUPVAR in the presence of deep scope nesting, resulting in a use-after-free. This could allow an attacker wh...