Fluid Attacks Database

Description

Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2. # Impact: Possible arbitrary code execution if being exploited.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	mruby	>=0 <3.1.0-1	3.1.0-1
debian 13	mruby	>=0 <3.1.0-1	3.1.0-1
debian 14	mruby	>=0 <3.1.0-1	3.1.0-1
debian 11	mruby	=2.1.2-3 \|\| =3.0.0-1 \|\| =3.0.0-2 \|\| =3.0.0-3 \|\| =3.0.0-4 \|\| =3.1.0-1 \|\| =3.1.0-2 \|\| =3.1.0-3 \|\| =3.2.0-1 \|\| =3.2.0-2 \|\| =3.3.0-1 \|\| =3.3.0~rc2-1 \|\| =3.4.0-1 \|\| =3.4.0-1~exp1 \|\| =3.4.0-1~exp2 \|\| =3.4.0-2	-

Aliases

1. CVE-2022-14272. NVD-2022-14273. OSV-DEBIAN-2022-14274. OSV-2022-14275. SECURITY-TRACKER-CVE-2022-1427

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.