CVE-2018-11499

🗓️ 26 May 2018 20:29:00Reported by GoogleType

osv_cve🔗 osv.dev👁 35 Views

A use-after-free vulnerability in handle_error() in LibSass 3.4.x and 3.5.x through 3.5.4 could cause denial of service or other impac

Reporter	Title	Published	Views	Family All 48
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System.	16 Aug 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties in Open Source packages affects IBM Watson Machine Learning Accelerator on Cloud Pak for Data	6 Dec 202316:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to multiple vulnerabilities	12 Dec 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: OSS security Scan issues for Concerto installer.	8 Dec 202006:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by multiple open source software vulnerabilities.	1 Apr 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vunerable to libsass and node-sass vulnerabilities	6 Dec 202316:20	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Security issues for NPS console.	15 Dec 202007:03	–	ibm
IBM Security Bulletins	Security Bulletin: OSS scan fixes for Content pos	15 Dec 202006:58	–	ibm
CNVD	LibSass Memory Misreference Vulnerability	28 May 201800:00	–	cnvd
CVE	CVE-2018-11499	26 May 201820:00	–	cve

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html
lists	www.lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html
lists	www.lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
github	www.github.com/sass/libsass/issues/2643

24 Oct 2026 10:50Current

9.7Critical risk

Vulners AI Score9.7

CVSS 39.8

EPSS0.03838