First published: Tue Jun 12 2018(Updated: )
An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class_real because "class BasicObject" is not properly supported in class.c.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mruby Mruby | =1.4.1 | |
Debian Debian Linux | =9.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2018-12249 is high, with a severity keyword of 'high' and a severity value of 7.5.
The affected software for CVE-2018-12249 is Mruby 1.4.1 and Debian Debian Linux 9.0.
CVE-2018-12249 is an issue discovered in mruby 1.4.1 where there is a NULL pointer dereference in mrb_class_real due to improper support for 'class BasicObject' in class.c.
To fix CVE-2018-12249, it is recommended to update to a version of mruby that includes the fix or apply the relevant patch provided by the vendor.
More information about CVE-2018-12249 can be found in the references: [GitHub Commit](https://github.com/mruby/mruby/commit/faa4eaf6803bd11669bc324b4c34e7162286bfa3), [GitHub Issue](https://github.com/mruby/mruby/issues/4037), [Debian LTS Announcement](https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html).