ChakraCore 2018-05 security updates#5116

Merged

chakrabot merged 14 commits intochakra-core:release/1.8from

MSLaguana:servicing/1805

May 8, 2018

Commits on May 8, 2018

[CVE-2018-0945] Chakra - Crashing on a null deref - Individual

Meghana Gupta
authored and
MSLaguana
committed
[CVE-2018-8139] Edge - Chakra type confusion in boundfunction handling - Internal
MSLaguana
committed
[CVE-2018-8137] Edge - chakra JIT array out of bound read/write vulnerability lead to Remote Code Execution

sigatrev
authored and
MSLaguana
committed
[CVE-2018-8178] Edge - Incorrect entry point expiration can cause RCE - Internal

pleath
authored and
MSLaguana
committed
[CVE-2018-8128] Edge - UAF of borrowed inline caches after redeferral

pleath
authored and
MSLaguana
committed
[CVE-2018-8177] Edge - Speculative type confusion on PropertyString

sethbrenith
authored and
MSLaguana
committed
Add masking of stores for protection against Spectre.

Penguinwizzard
authored and
MSLaguana
committed
[CVE-2018-8130] [CVE-2018-0946] move allocators to ServerScriptContext, add missing marshalling code

MikeHolman
authored and
MSLaguana
committed
[CVE-2018-0953] Edge Chakra - JIT: Magic value can cause type confusion - Google, Inc.

rajatd
authored and
MSLaguana
committed
[CVE-2018-0943]: Chakra Bug 15964039 - Unrestored bytecode register after bailout

rajatd
authored and
MSLaguana
committed
[CVE-2018-8133] Edge - Chakra: Type confusion with EntrySimpleObjectSlotGetter

akroshg
authored and
MSLaguana
committed
[CVE-2018-1022] Inline segment is passed to another array - Internal

akroshg
authored and
MSLaguana
committed
[CVE-2018-0954] Report a stack variable uaf bug to Edge Bug Bounty - 360Vulcan - Edge RCE+Web Plat beta bounty on WIP

agarwal-sandeep
authored and
MSLaguana
committed
Bumping version prior to release
MSLaguana
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

ChakraCore 2018-05 security updates#5116

ChakraCore 2018-05 security updates#5116
chakrabot merged 14 commits intochakra-core:release/1.8from
MSLaguana:servicing/1805

Commits on May 8, 2018

[CVE-2018-0945] Chakra - Crashing on a null deref - Individual

[CVE-2018-8139] Edge - Chakra type confusion in boundfunction handling - Internal

[CVE-2018-8137] Edge - chakra JIT array out of bound read/write vulnerability lead to Remote Code Execution

[CVE-2018-8178] Edge - Incorrect entry point expiration can cause RCE - Internal

[CVE-2018-8128] Edge - UAF of borrowed inline caches after redeferral

[CVE-2018-8177] Edge - Speculative type confusion on PropertyString

Add masking of stores for protection against Spectre.

[CVE-2018-8130] [CVE-2018-0946] move allocators to ServerScriptContext, add missing marshalling code

[CVE-2018-0953] Edge Chakra - JIT: Magic value can cause type confusion - Google, Inc.

[CVE-2018-0943]: Chakra Bug 15964039 - Unrestored bytecode register after bailout

[CVE-2018-8133] Edge - Chakra: Type confusion with EntrySimpleObjectSlotGetter

[CVE-2018-1022] Inline segment is passed to another array - Internal

[CVE-2018-0954] Report a stack variable uaf bug to Edge Bug Bounty - 360Vulcan - Edge RCE+Web Plat beta bounty on WIP

Bumping version prior to release

ChakraCore 2018-05 security updates#5116chakrabot merged 14 commits intochakra-core:release/1.8chakra-core/ChakraCore:release/1.8from MSLaguana:servicing/1805MSLaguana/ChakraCore:servicing/1805Copy head branch name to clipboard

Commits

Commits on May 8, 2018

ChakraCore 2018-05 security updates#5116
chakrabot merged 14 commits intochakra-core:release/1.8from
MSLaguana:servicing/1805