Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

December 2018, servicing update #5869

Merged
merged 5 commits into from
Dec 11, 2018
Merged

December 2018, servicing update #5869

merged 5 commits into from
Dec 11, 2018

Commits on Dec 10, 2018

  1. CVE-2018-8583 Edge - Chakra JIT OOB 9 13 leads to RCE 

    In the loop range check we emit add instruction to add 1 to the range. That can overflow. We did't have overflow bailout over there.
Fixed that by adding bailout over there.
    @akroshg
    akroshg committed Dec 10, 2018
    Configuration menu
    Copy the full SHA
    8d21cde View commit details
    Browse the repository at this point in the history

  2. CVE-2018-8624 Edge - Chakra JIT Overflow

    @wyrichte @akroshg
    wyrichte authored and akroshg committed Dec 10, 2018
    Configuration menu
    Copy the full SHA
    8264b9b View commit details
    Browse the repository at this point in the history

  3. CVE-2018-8618 Edge - Report a type confusion bug

    @akroshg
    Meghana Gupta authored and akroshg committed Dec 10, 2018
    Configuration menu
    Copy the full SHA
    5db4218 View commit details
    Browse the repository at this point in the history

  4. CVE-2018-8629 OOB bug in Edge WIP

    @rajatd @akroshg
    rajatd authored and akroshg committed Dec 10, 2018
    Configuration menu
    Copy the full SHA
    69a259c View commit details
    Browse the repository at this point in the history

  5. CVE-2018-8617

    @pleath @akroshg
    pleath authored and akroshg committed Dec 10, 2018
    Configuration menu
    Copy the full SHA
    c04787f View commit details
    Browse the repository at this point in the history