First published: Sat Jan 11 2020(Updated: )
In mruby 2.1.0, there is a stack-based buffer overflow in mrb_str_len_to_dbl in string.c.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mruby Mruby | =2.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of this mruby issue is CVE-2020-6839.
The severity level of CVE-2020-6839 is critical with a score of 9.8.
You can find more information about CVE-2020-6839 at the following link: https://github.com/mruby/mruby/issues/4929.
The affected software version of CVE-2020-6839 is mruby 2.1.0.
The CWE ID of CVE-2020-6839 is CWE-119 and CWE-787.