Use-After-Free Vulnerability in mruby Hash Extension By mruby
CVE-2020-6838

9.8CRITICAL

Key Information:

Vendor

Mruby

Status
Mruby
Vendor
CVE Published:
11 January 2020

What is CVE-2020-6838?

The mruby implementation contains a use-after-free vulnerability located in the 'hash_values_at' function in the hash extension module. This flaw can lead to potential data corruption and unpredictable behavior, making the system susceptible to attacks if exploited. It is crucial for users to review their deployments and apply necessary patches to safeguard against exploitation.

References

https://github.com/mruby/mruby/issues/4926
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.