1198288 – (CVE-2022-1276) VUL-0: CVE-2022-1276: mruby: Out-of-bounds Read in mrb_get_args in mruby prior to 3.2

Bug 1198288 (CVE-2022-1276) - VUL-0: CVE-2022-1276: mruby: Out-of-bounds Read in mrb_get_args in mruby prior to 3.2

Summary: VUL-0: CVE-2022-1276: mruby: Out-of-bounds Read in mrb_get_args in mruby prio...

Status:	RESOLVED WORKSFORME

Alias:	CVE-2022-1276

Product:	openSUSE Distribution
Classification:	openSUSE
Component:	Security (show other bugs)
Version:	Leap 15.4
Hardware:	Other Other

Priority:	P3 - Medium Severity: Minor (vote)
Target Milestone:	---
Assignee:	Ferdinand Thiessen
QA Contact:	Security Team bot

URL:	https://smash.suse.de/issue/328492/
Whiteboard:
Keywords:

Depends on:
Blocks:

Clone This Bug

Reported:	2022-04-11 07:18 UTC by Cathy Hu
Modified:	2022-04-26 19:17 UTC (History)
CC List:	0 users

See Also:
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Cathy Hu 2022-04-11 07:18:24 UTC

CVE-2022-1276

Out-of-bounds Read in mrb_get_args in GitHub repository mruby/mruby prior to
3.2. Possible arbitrary code execution if being exploited.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1276
https://github.com/mruby/mruby/commit/c8c083cb750606b2da81582cd8e43b442bb143e6
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1276
http://www.cvedetails.com/cve/CVE-2022-1276/
https://huntr.dev/bounties/6ea041d1-e2aa-472c-bf3e-da5fa8726c25

Comment 1 Cathy Hu 2022-04-11 07:19:09 UTC

Affects:
- openSUSE:Factory/mruby 3.0.0

Comment 2 Ferdinand Thiessen 2022-04-26 19:17:59 UTC

Could not reproduce, probably not affected 3.0 but only git.

> % mruby POC 
> trace (most recent call last):
> ./POC:1: Integer cannot be converted to String (TypeError)