Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2018-10191: mruby versions 1.4.0 and earlier allow attackers to run arbitrary code
CVE-2018-10191 · published 8 years ago
Summary
mruby versions up to 1.4.0 have a bug that could let an attacker run malicious code. This is a serious issue because it means an attacker could take control of the system. To stay safe, update to a newer version of mruby.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| mruby | mruby |
<= 1.4.0 cpe:2.3:a:mruby:mruby:*:*:*:*:*:*:*:* |
| debian | debian_linux |
9.0 cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
Original advisory text
In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrb_vm_exec() when handling OP_GETUPVAR in the presence of deep scope nesting, resulting in a use-after-free....
In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrb_vm_exec() when handling OP_GETUPVAR in the presence of deep scope nesting, resulting in a use-after-free. An attacker that can cause Ruby code to be run can use this to possibly execute arbitrary code.
References
- https://github.com/mruby/mruby/commit/1905091634a6a2925c911484434448e568330626 Patch Third Party Advisory
- https://github.com/mruby/mruby/issues/3995 Exploit Issue Tracking Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html Mailing List Third Party Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-190Integer Overflow
Timeline
Published17 Apr 2018
Updated30 Oct 2026
First seen11 Apr 2026
Track software like this
Free during beta