CVE-2018-11743

The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denial of service (mrb_hash_keys uninitialized pointer and application crash) or possibly have unspecified other impact.

• CWE-824

• https://github.com/mruby/mruby/commit/b64ce17852b180dfeea81cf458660be41a78974dPatch, Third Party Advisory
• https://github.com/mruby/mruby/issues/4027Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/05/msg00006.htmlMailing List, Third Party Advisory
• https://github.com/mruby/mruby/commit/b64ce17852b180dfeea81cf458660be41a78974dPatch, Third Party Advisory
• https://github.com/mruby/mruby/issues/4027Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/05/msg00006.htmlMailing List, Third Party Advisory

Published

Jun 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11738An issue was discovered in libtskfs.a in The Sleuth Kit (TSK…
• CVE-2018-11739An issue was discovered in libtskimg.a in The Sleuth Kit (TS…
• CVE-2018-1174This vulnerability allows remote attackers to disclose sensi…
• CVE-2018-11740An issue was discovered in libtskbase.a in The Sleuth Kit (T…
• CVE-2018-11741NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable …9.8
• CVE-2018-11742NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Pa…9.8
• CVE-2018-11744Cloudera Manager through 5.15 has Incorrect Access Control.
• CVE-2018-11746In Puppet Discovery prior to 1.2.0, when running Discovery a…8.6
• CVE-2018-11747Previously, Puppet Discovery was shipped with a default gene…
• CVE-2018-11748Previous releases of the Puppet device_manager module create…
• CVE-2018-11749When users are configured to use startTLS with RBAC LDAP, at…
• CVE-2018-1175This vulnerability allows remote attackers to disclose sensi…