CVE-2018-11743: Debian Linux
Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.
The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denial of service (mrb_hash_keys uninitialized pointer and application crash) or possibly have unspecified other impact.
Affected products
Published 2018-06-05. Last modified 2026-06-17.