Moderate: Red Hat Security Advisory: Red Hat OpenShift Enterprise Logging bug fix and security update (5.3.3)

An update is now available for OpenShift Logging 5.3.3 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in t...

CVE-2020-23315

There is an ASSERTION pFuncBody-GetYieldRegister == oldYieldRegister failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta...

CVE-2020-23315

There is an ASSERTION pFuncBody-GetYieldRegister == oldYieldRegister failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta...

CVE-2021-46344

There is an Assertion 'flags & PARSERPATTERNHASRESTELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

CVE-2021-46343

CVE-2021-46343 affects JerryScript 3.0.0. The vulnerability is a denial-of-service caused by an assertion failure: Failure: assertion 'context_p->token.type == LEXER_LITERAL' in /jerry-core/parser/js/js-parser-expr.c. Impact: reported as DoS; no further exploit/vector details are provided in t...

CVE-2021-46340

There is an Assertion 'contextp-stacktopuint8 == SCANSTACKTRYSTATEMENT || contextp-stacktopuint8 == SCANSTACKCATCHSTATEMENT' failed at /parser/js/js-scanner.cscannerscanstatementend in JerryScript 3.0.0...

PT-2022-12656

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description An assertion failure occurs in JerryScript due to the condition 'context p-token.type == LEXER LITERAL' not being met. This issue is located in the file /jerry-core/parser/js/js-parser-expr.c...

JerryScript security vulnerabilities

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a security vulnerability in JerryScript 3.0.0, which stems from an assertion in /jerry-core/parser/js/js-parser-expr.c flags & PARSERPATTERNHASRESTELEMENT fails. No details of the vulnerability are currently provided...

PT-2022-12654

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description An assertion failure occurs in the scanner scan statement end function at /parser/js/js-scanner.c due to an invalid state. This issue is related to the scanning of statement endings in the JavaScript parse...

CVE-2021-46340: Reachable Assertion

There is an Assertion 'contextp-stacktopuint8 == SCANSTACKTRYSTATEMENT || contextp-stacktopuint8 == SCANSTACKCATCHSTATEMENT' failed at /parser/js/js-scanner.cscannerscanstatementend in JerryScript 3.0.0...

PT-2022-12650

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in the parser parse class body function at /parser/js/js-parser-expr.c in JerryScript. The assertion opts & PARSER CLASS LITERAL CTOR PRESENT failed...

PT-2022-8658

Name of the Vulnerable Software and Affected Versions ChakraCore version 1.12.0.0-beta Description The issue is related to an assertion failure in the Js::DebugContext::RundownSourcesAndReparse function, specifically when comparing pFuncBody-GetYieldRegister and oldYieldRegister. Recommendations...

PT-2022-12657

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description An assertion failure occurs in JerryScript due to a failed check for the 'flags & PARSER PATTERN HAS REST ELEMENT' condition at the /jerry-core/parser/js/js-parser-expr.c location. Recommendations For...

CVE-2021-46336: Reachable Assertion

There is an Assertion 'opts & PARSERCLASSLITERALCTORPRESENT' failed at /parser/js/js-parser-expr.cparserparseclassbody in JerryScript 3.0.0...

CVE-2022-22890: Reachable Assertion

There is an Assertion 'argumentstype != SCANNERARGUMENTSPRESENT && argumentstype != SCANNERARGUMENTSPRESENTNOREG' failed at /jerry-core/parser/js/js-scanner-util.c in Jerryscript 3.0.0...

CVE-2021-46337: Reachable Assertion

There is an Assertion 'pagep != NULL' failed at /parser/js/js-parser-mem.cparserlistget in JerryScript 3.0.0...

CVE-2020-23315: Undefined Security Weakness

There is an ASSERTION pFuncBody-GetYieldRegister == oldYieldRegister failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta...

CVE-2021-46343: Reachable Assertion

There is an Assertion 'contextp-token.type == LEXERLITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

CVE-2021-46344: Reachable Assertion

There is an Assertion 'flags & PARSERPATTERNHASRESTELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

PT-2022-15718

Name of the Vulnerable Software and Affected Versions Jerryscript version 3.0.0 Description The issue is related to an assertion failure in the js-scanner-util.c file of Jerryscript. The assertion arguments type != SCANNER ARGUMENTS PRESENT && arguments type != SCANNER ARGUMENTS PRESENT NO REG...