CVE-2018-19838

In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENTASTOPERATORS expansion allow attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, as demonstrated by recursive calls involving clone, cloneChildren, and copy...

CVE-2018-19837

In LibSass prior to 3.5.5, Sass::Eval::operatorSass::BinaryExpression inside eval.cpp allows attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, because of certain incorrect parsing of '%' as a modulo operator in parser.cpp...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19839

CVE-2018-19839 affects LibSass prior to 3.5.5. The vulnerability is a heap-based buffer over-read in Sass::handle_error (sass_context.cpp) that attackers can trigger via a crafted Sass file, causing a denial-of-service. Public details in the initial document confirm the exact function and file, t...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19838

CVE-2018-19838 concerns LibSass pre-3.5.5, where functions in ast.cpp used for IMPLEMENT_AST_OPERATORS expansion can cause a denial of service via stack consumption when processing a crafted Sass file. The vulnerability arises from a stack-based buffer/recursion pattern in the IMPLEMENT_AST_OPERA...

CVE-2018-19837

In LibSass prior to 3.5.5, Sass::Eval::operatorSass::BinaryExpression inside eval.cpp allows attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, because of certain incorrect parsing of '%' as a modulo operator in parser.cpp...

LibSass Denial of Service Vulnerability (CNVD-2018-24636)

LibSass is an open source written in C using Sass CSS extension language parser . A denial of service vulnerability exists in the inspect.cpp file in LibSass version 3.5.5, which can be exploited by an attacker to cause a denial of service with the help of a specially crafted sass input file...

CVE-2018-19837: Uncontrolled Resource Consumption

In LibSass prior to 3.5.5, Sass::Eval::operatorSass::BinaryExpression inside eval.cpp allows attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, because of certain incorrect parsing of '%' as a modulo operator in parser.cpp...

CVE-2018-19839: Out-of-bounds Read

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

PT-2018-15123

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.5 Description The issue allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file. This is due to the function handle error in sass context.cpp...

LibSass Denial of Service Vulnerability (CNVD-2019-05924)

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the SharedPtr class of the SharedPtr.cpp file or SharedPtr.hpp file in LibSass version 3.5.5. An attacker can exploit this vulnerability to cause a denial of service application...

LibSass Denial of Service Vulnerability (CNVD-2019-06790)

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'handleerror' function of the sasscontext.cpp file in LibSass versions prior to 3.5.5. An attacker can exploit this vulnerability to cause a denial of service with the help of ...

LibSass Denial of Service Vulnerability (CNVD-2019-06789)

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in several functions of the ast.cpp file in LibSass versions prior to 3.5.5. An attacker can exploit this vulnerability to cause a denial of service stack corruption with the help of ...

PT-2018-15122

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.5 Description The issue allows attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file. This is demonstrated by recursive calls involving functions such as clone,...

CVE-2018-19838: Uncontrolled Resource Consumption

In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENTASTOPERATORS expansion allow attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, as demonstrated by recursive calls involving clone, cloneChildren, and copy...

PT-2018-15121

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.5 Description The issue allows attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file. This is due to incorrect parsing of '%' as a modulo operator. Recommendations For...

Memory corruption

DISPUTED In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop containing a Sass::Inspect::operatorSass::StringQuoted stack frame may cause a Denial of Service via crafted sass input files with stray '&' or '/' characters. NOTE: Upstream comments indicate this issue i...

Double free

In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp or SharedPtr.hpp that may cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-19826

In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop containing a Sass::Inspect::operatorSass::StringQuoted stack frame may cause a Denial of Service via crafted sass input files with stray '&' or '/' characters. NOTE: Upstream comments indicate this issue is closed ...