CVE-2018-11743

Опубликовано: 05 июн. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denial of service (mrb_hash_keys uninitialized pointer and application crash) or possibly have unspecified other impact.

Ссылки

https://github.com/mruby/mruby/commit/b64ce17852b180dfeea81cf458660be41a78974d
Patch
Third Party Advisory
https://github.com/mruby/mruby/issues/4027
Exploit
Issue Tracking
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html
Mailing List
Third Party Advisory
https://github.com/mruby/mruby/commit/b64ce17852b180dfeea81cf458660be41a78974d
Patch
Third Party Advisory
https://github.com/mruby/mruby/issues/4027
Exploit
Issue Tracking
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mruby:mruby:1.4.1:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00567

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-824

Связанные уязвимости

CVE-2018-11743

CVSS3: 9.8

ubuntu

больше 7 лет назад

CVE-2018-11743

CVSS3: 9.8

debian

больше 7 лет назад

The init_copy function in kernel.c in mruby 1.4.1 makes initialize_cop ...

GHSA-7w9j-h3hj-wc9g

CVSS3: 9.8

github

почти 4 года назад

EPSS

Процентиль: 68%

0.00567

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-824