Debian/mruby: high 7.5
An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OP_ENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to
Action: Upgrade mruby to 1.4.1+20180622+git640fca32-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.1+20180622+git640fca32-1 | - |
Fixed versions
| 1.4.1+20180622+git640fca32-1 |
Sources
- osv: DEBIAN-CVE-2018-12248#Debian:14/mruby
- https://security-tracker.debian.org/tracker/CVE-2018-12248
published · modified · JSON