NULL Pointer Dereference in Homebrew mruby prior to 3.2.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - NULL Pointer Dereference in Homebrew mruby prior to 3.2. (CVE-2022-0632)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Heap-based Buffer Overflow in Homebrew mruby prior to 3.2. (CVE-2022-0631)

  - mruby is vulnerable to NULL Pointer Dereference (CVE-2021-4110, CVE-2021-4188, CVE-2022-0240)

  - mruby is vulnerable to Heap-based Buffer Overflow (CVE-2022-0080)

ID	Name	Product	Family	Severity
255681	Linux Distros Unpatched Vulnerability : CVE-2022-0632	Nessus	Misc.	medium
405639	Alpine: multiple mruby packages: security update to 3.1.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
405639	Alpine: multiple mruby packages: security update to 3.1.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical

Detections

Analytics

CVE-2022-0632

medium

Tenable Plugins

medium

critical

critical