Описание
Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mruby | fixed | 3.0.0-4 | package | |
| mruby | no-dsa | bullseye | package | |
| mruby | no-dsa | buster | package | |
| mruby | not-affected | stretch | package |
Примечания
https://huntr.dev/bounties/9fcc06d0-08e4-49c8-afda-2cae40946abe/
https://github.com/mruby/mruby/commit/3cf291f72224715942beaf8553e42ba8891ab3c6
EPSS
Процентиль: 75%
0.0168
Низкий
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 4 лет назад
Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.
CVSS3: 9.8
nvd
больше 4 лет назад
Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.
CVSS3: 9.8
github
больше 4 лет назад
Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.
EPSS
Процентиль: 75%
0.0168
Низкий