CVE-2018-11743

The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denial of service…

published June 5, 2018

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

⚠️ One unhandled pointer issue in mruby could lead to a spectacular crash party! 🎉 Think of the init_copy function like a chef who tries to prep a dish with missing ingredients — the meal (or in this case, your application) ends up in a complete mess! If exploited, an attacker could trigger a denial of service, causing your application to crash unexpectedly. This could lead to downtime and frustrated users, which is never a good look for your software!

Put simply

Think of the init_copy function like a chef who tries to prep a dish with missing ingredients — the meal (or in this case, your application) ends up in a complete mess! In mruby 1.4.1, the init_copy function fails to properly handle TT_ICLASS objects, leading to uninitialized pointer errors in the mrb_hash_keys function, which can crash the application.

What to do

If exploited, an attacker could trigger a denial of service, causing your application to crash unexpectedly. This could lead to downtime and frustrated users, which is never a good look for your software! To safeguard your application, update mruby to the latest stable version that addresses this issue. Regularly audit your code to ensure there are no uninitialized pointers lurking around! You've got this! Stay proactive, and your application will be solid as a rock! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02169 · 82.1th percentile
Published
2018-06-05T13:00Z
EPSS history
Timeline
  • 05 JUN 13:00Z
    The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denial of service…
    cvelistv5