UBUNTU-CVE-2017-12963

There is an illegal address access in Sass::Eval::operator in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's CVE-2017-11555 fix available from GitHub after 2017-07-24...

CVE-2017-12964

There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator in eval.cpp. It will lead to a remote denial of service attack...

CVE-2017-12962

There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, leading to a remote denial of service attack...

Code injection

There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, leading to a remote denial of service attack...

CVE-2017-12963

There is an illegal address access in Sass::Eval::operator in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's CVE-2017-11555 fix available from GitHub after 2017-07-24...

CVE-2017-12963

There is an illegal address access in Sass::Eval::operator in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's CVE-2017-11555 fix available from GitHub after 2017-07-24...

UBUNTU-CVE-2017-12964

There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator in eval.cpp. It will lead to a remote denial of service attack...

CVE-2017-12964

CVE-2017-12964 describes a stack-consumption vulnerability in LibSass 3.4.5 triggered by Sass::Eval::operator() in eval.cpp, resulting in a remote denial of service. The affected component is LibSass (C/C++ library for Sass). The available sources consistently state a stack-based denial of servic...

CVE-2017-12964

There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator in eval.cpp. It will lead to a remote denial of service attack...

CVE-2017-12963

There is an illegal address access in Sass::Eval::operator in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's CVE-2017-11555 fix available from GitHub after 2017-07-24...

CVE-2017-12962

There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, leading to a remote denial of service attack...

CVE-2017-12963

LibSass 3.4.5 is affected by an illegal address access in Sass::Eval::operator() (eval.cpp) that enables remote denial of service. The issue is described as similar to CVE-2017-11555 but continues to be exploitable even after the vendor’s CVE-2017-11555 fix (available from GitHub after 2017-07-24...

CVE-2017-12962

CVE-2017-12962 affects LibSass 3.4.5, with memory leaks triggered by deeply nested code (e.g., long sequences of opening parentheses) that can lead to remote denial of service. Concrete details across multiple connected sources confirm the software/version, root cause (memory leaks under nested p...

LibSass 'lex' Function Denial of Service Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'lex' function of the parser.hpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability to cause a denial of service stack consumption with the help of...

LibSass eval.cpp File Denial of Service Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the eval.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a denial of service...

LibSass 'Parser::advanceToNextToken' Function Denial of Service Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'Parser::advanceToNextToken' function of the parser.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability to cause a denial of service stack...

LibSass Heap Buffer Overflow Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A heap buffer overflow vulnerability exists in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a denial of service...

LibSass Heap Buffer Out-of-Bounds Read Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A heap buffer out-of-bounds read vulnerability exists in the 'Sass::Prelexer::relinebreak' function of the lexer.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially...

Heap overflow

There is a heap-based buffer over-read in the Sass::Prelexer::relinebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11608

There is a heap-based buffer over-read in the Sass::Prelexer::relinebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...