Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4412
HistoryJun 12, 2017 - 1:26 a.m.

Denial Of Service (DoS)

2017-06-1201:26:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.002 Low

EPSS

Percentile

53.8%

mruby is vulnerable to denial of service (DoS) attacks. The attacks exist because the mark_context_stack() function in gc.c does not properly handle a .rb file, allowing the attacker to trigger a heap-based use-after-free and application crash (possibly other impacts) using a malicious .rb file.

CPENameOperatorVersion
mruby-iosle1.2.0
mruby-iosle1.2.0

0.002 Low

EPSS

Percentile

53.8%