CVE-2022-4996

EUVD-2022-56020
A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to apply a patch to resolve this issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 48.71%
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mruby
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
xenial
needs-triage
Common Weakness Enumeration
References
https://huntr.com/bounties/5a5092df-1699-4497-a8b2-38318bce0c4e
https://vuldb.com/cve/CVE-2022-4996
https://vuldb.com/submit/877513
https://vuldb.com/vuln/391391
https://vuldb.com/vuln/391391/cti