Skip to content
OpenAdvisories
Unscored DLA-2996-1 6 CVEs

mruby - security update

Published May 6, 2022 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 mruby 1.2.0+20161228+git30d5424a-1+deb9u1

Vulnerabilities 6

  • Unscored —

    The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service (heap-base…

  • Unscored —

    In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrb_vm_exec() when handling OP_…

  • Unscored —

    The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attac…

  • Unscored —

    An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class_real because "class BasicObjec…

  • Unscored —

    The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly lead…

  • Unscored —

    mruby through 2.1.2-rc has a heap-based buffer overflow in the mrb_yield_with_class function in vm.c because of incorre…