What is GHSA-8v2h-4jpm-3wfm?

GHSA-8v2h-4jpm-3wfm is a security advisory published by GitHub Security Advisories with Critical severity. ChakraCore RCE Vulnerability

Which CVE IDs does GHSA-8v2h-4jpm-3wfm cover?

GHSA-8v2h-4jpm-3wfm covers the following CVE IDs: CVE-2017-8658. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8v2h-4jpm-3wfm?

GHSA-8v2h-4jpm-3wfm has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-8v2h-4jpm-3wfm?

GHSA-8v2h-4jpm-3wfm affects 1 product, including: nuget/Microsoft.ChakraCore:\u003c 1.6.1.

GHSA-8v2h-4jpm-3wfmCriticalCVSS 9.8

ChakraCore RCE Vulnerability

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

October 24, 2023

🔗 CVE IDs covered (1)

CVE-2017-8658 →

📋 Description

A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".

🎯 Affected products1

nuget/Microsoft.ChakraCore:< 1.6.1

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2017-8658
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8658
https://github.com/chakra-core/ChakraCore/pull/3509
https://github.com/chakra-core/ChakraCore/commit/2500e1cdc12cb35af73d5c8c9b85656aba6bab4d
https://web.archive.org/web/20210124090857/http://www.securityfocus.com/bid/100036
https://github.com/advisories/GHSA-8v2h-4jpm-3wfm