LibSass Heap Buffer Over-Read Vulnerability

🗓️ 15 Jan 2019 00:00:00Reported by China National Vulnerability DatabaseType

LibSass heap buffer over-read in Prelexer::alternatives (version 3.5.5) may cause denial of service.

Reporter	Title	Published	Views	Family All 51
IBM Security Bulletins	Security Bulletin: IBM Security Verify Information Queue uses a Node.js package with multiple vulnerabilities	10 Feb 202116:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System.	16 Aug 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties in Open Source packages affects IBM Watson Machine Learning Accelerator on Cloud Pak for Data	6 Dec 202316:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities	30 Mar 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to multiple vulnerabilities	12 Dec 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: OSS security Scan issues for Concerto installer.	8 Dec 202006:37	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202317:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vunerable to libsass and node-sass vulnerabilities	6 Dec 202316:20	–	ibm
IBM Security Bulletins	Security Bulletin: Medium/low severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:51	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Security issues for NPS console.	15 Dec 202007:03	–	ibm

Vulners

Node

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-6284

12 Nov 2019 00:00Current

9.2Critical risk

Vulners AI Score9.2

CVSS 24.3

CVSS 3.16.5

EPSS0.02096