Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Sat, 26 Nov 2016 17:49:28 -0500
From: <cve-assign@...re.org>
To: <gustavo.grieco@...il.com>
CC: <cve-assign@...re.org>, <oss-security@...ts.openwall.com>
Subject: Re: CVE request: Heap read out-of-bounds parsing a Javascript file with the last revision of JavaScript Core

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

> https://bugs.webkit.org/show_bug.cgi?id=164000

> AddressSanitizer: heap-buffer-overflow
> READ of size 16

>     #0 0x7ffff67f04af in WTF::(anonymous namespace)::lockHashtable()
> (/home/g/Work/Code/webkit-master/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18+0x20cc4af)
>     #1 0x7ffff67f1b6c in WTF::ParkingLot::parkConditionallyImpl(void
> const*, WTF::ScopedLambda<bool ()> const&, WTF::ScopedLambda<void ()>
> const&, std::chrono::time_point<std::chrono::_V2::steady_clock,
> std::chrono::duration<long, std::ratio<1l, 1000000000l> > >)
> (/home/g/Work/Code/webkit-master/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18+0x20cdb6c)
>     #2 0x7ffff67cc1cb in std::_Function_handler<void (),
> WTF::AutomaticThread::start(WTF::Locker<WTF::LockBase>
> const&)::{lambda()#1}>::_M_invoke(std::_Any_data const&)
> (/home/g/Work/Code/webkit-master/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18+0x20a81cb)

> After a month, i received no response from the original bug report in the
> webkit bug tracker. Additionally, Chrome / Chromium is not affected.

Use CVE-2016-9642.

Incidentally, the published WebKit policy is apparently "We cannot
guarantee a prompt human response to every security bug filed. If you
would like immediate feedback on a security issue, or would like to
discuss details with members of the WebKit Security Group, please
email security@...kit.org and include a link to the relevant Bugzilla
bug. Your message will be acknowledged within a week at most." on the
https://webkit.org/security-policy/ web page.

- -- 
CVE Assignment Team
M/S M300, 202 Burlington Road, Bedford, MA 01730 USA
[ A PGP key is available for encrypted communications at
  http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=gYlb
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ