User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2. (CVE-2022-1071)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Heap-based Buffer Overflow in Homebrew mruby prior to 3.2. (CVE-2022-0631)

  - mruby is vulnerable to NULL Pointer Dereference (CVE-2021-4110, CVE-2021-4188, CVE-2022-0240)

  - mruby is vulnerable to Heap-based Buffer Overflow (CVE-2022-0080)

ID	Name	Product	Family	Severity
229669	Linux Distros Unpatched Vulnerability : CVE-2022-1071	Nessus	Misc.	high
405639	Alpine: multiple mruby packages: security update to 3.1.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
405639	Alpine: multiple mruby packages: security update to 3.1.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical

Detections

Analytics

CVE-2022-1071

high

Tenable Plugins

high

critical

critical