CVE-2018-19797

In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::SelectorList::populateextends in SharedPtr.hpp used by ast.cpp and astselectors.cpp may cause a Denial of Service application crash via a crafted sass input file...

CVE-2018-19797

CVE-2018-19797 : LibSass 3.5.5 contains a NULL pointer dereference in Sass::Selector_List::populate_extends (SharedPtr.hpp, used by ast.cpp/ast_selectors.cpp) that can cause a Denial of Service (application crash) when processing crafted Sass input. The provided connected documents confirm the vu...

CVE-2018-19797

In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::SelectorList::populateextends in SharedPtr.hpp used by ast.cpp and astselectors.cpp may cause a Denial of Service application crash via a crafted sass input file...

PT-2018-15099

Name of the Vulnerable Software and Affected Versions LibSass version 3.5.5 Description The issue is related to a NULL Pointer Dereference in the function Sass::Selector List::populate extends, which may cause a Denial of Service application crash via a crafted sass input file. Recommendations Fo...

LibSass Null Pointer Dereference Vulnerability

LibSass is the C/C++ port of the Sass engine. A null pointer dereference vulnerability exists in the Sass::SelectorList::populateextends function in SharedPtr.hpp in LibSass 3.5.5. An attacker could use this vulnerability to cause a denial of service application crash via a specially crafted sass...

CVE-2018-19797: NULL Pointer Dereference

In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::SelectorList::populateextends in SharedPtr.hpp used by ast.cpp and astselectors.cpp may cause a Denial of Service application crash via a crafted sass input file...

CVE-2018-19827: Use After Free

In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp or SharedPtr.hpp that may cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-19826: Loop with Unreachable Exit Condition

In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop containing a Sass::Inspect::operatorSass::StringQuoted stack frame may cause a Denial of Service via crafted sass input files with stray '&' or '/' characters. NOTE: Upstream comments indicate this issue is closed ...

PT-2018-15115 · Sass · Libsass

Name of the Vulnerable Software and Affected Versions: LibSass version 3.5.5 Description: A high memory footprint issue caused by an endless loop may lead to a Denial of Service when processing crafted sass input files containing stray '&' or '/' characters. This issue is considered closed by the...

PT-2018-15116

Name of the Vulnerable Software and Affected Versions LibSass version 3.5.5 Description A use-after-free issue exists in the SharedPtr class that may cause a denial of service, potentially leading to an application crash, or possibly have other unspecified impacts. Recommendations For LibSass...

Unspecified Vulnerability in LibSass (CNVD-2019-40138)

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'Sass::Eval::operator' function in LibSass version 3.5-stable. An attacker can exploit this vulnerability to cause a denial of service...

Unspecified Vulnerability in LibSass

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'Sass::Parser::parsecssvariablevaluetoken' function in LibSass version 3.5-stable. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2018-19218

In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parsecssvariablevaluetoken that will lead to a DoS attack...

CVE-2018-19219

In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack...

UBUNTU-CVE-2018-19219

In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack...

CVE-2018-19218

In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parsecssvariablevaluetoken that will lead to a DoS attack...

CVE-2018-19218

In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parsecssvariablevaluetoken that will lead to a DoS attack...

UBUNTU-CVE-2018-19218

In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parsecssvariablevaluetoken that will lead to a DoS attack...

Code injection

In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parsecssvariablevaluetoken that will lead to a DoS attack...

Code injection

In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack...