614 matches found
CVE-2017-12964
There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator in eval.cpp. It will lead to a remote denial of service attack...
CVE-2017-12963
There is an illegal address access in Sass::Eval::operator in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's CVE-2017-11555 fix available from GitHub after 2017-07-24...
CVE-2017-12963
LibSass 3.4.5 is affected by an illegal address access in Sass::Eval::operator() (eval.cpp) that enables remote denial of service. The issue is described as similar to CVE-2017-11555 but continues to be exploitable even after the vendor’s CVE-2017-11555 fix (available from GitHub after 2017-07-24...
CVE-2017-12962
CVE-2017-12962 affects LibSass 3.4.5, with memory leaks triggered by deeply nested code (e.g., long sequences of opening parentheses) that can lead to remote denial of service. Concrete details across multiple connected sources confirm the software/version, root cause (memory leaks under nested p...
CVE-2017-12962
There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, leading to a remote denial of service attack...
CVE-2017-12964
CVE-2017-12964 describes a stack-consumption vulnerability in LibSass 3.4.5 triggered by Sass::Eval::operator() in eval.cpp, resulting in a remote denial of service. The affected component is LibSass (C/C++ library for Sass). The available sources consistently state a stack-based denial of servic...
CVE-2017-12962: Missing Release of Resource after Effective Lifetime
There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, leading to a remote denial of service attack...
CVE-2017-12963: Out-of-bounds Read
There is an illegal address access in Sass::Eval::operator in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's CVE-2017-11555 fix available from GitHub after 2017-07-24...
CVE-2017-12964: Uncontrolled Recursion
There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator in eval.cpp. It will lead to a remote denial of service attack...
PT-2017-12807
Name of the Vulnerable Software and Affected Versions LibSass version 3.4.5 Description The issue is related to an illegal address access in the Sass::Eval::operator function in eval.cpp, which can lead to a remote denial of service attack. This problem remains exploitable even after the fix for ...
LibSass 'Parser::advanceToNextToken' Function Denial of Service Vulnerability
LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'Parser::advanceToNextToken' function of the parser.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability to cause a denial of service stack...
LibSass eval.cpp File Denial of Service Vulnerability
LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the eval.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a denial of service...
LibSass 'lex' Function Denial of Service Vulnerability
LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'lex' function of the parser.hpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability to cause a denial of service stack consumption with the help of...
LibSass Heap Buffer Out-of-Bounds Read Vulnerability
LibSass is an open source written in C using Sass CSS extension language parser . A heap buffer out-of-bounds read vulnerability exists in the 'Sass::Prelexer::relinebreak' function of the lexer.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially...
LibSass Heap Buffer Overflow Vulnerability
LibSass is an open source written in C using Sass CSS extension language parser . A heap buffer overflow vulnerability exists in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a denial of service...
CVE-2017-11608
There is a heap-based buffer over-read in the Sass::Prelexer::relinebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...
Heap overflow
There is a heap-based buffer over-read in the Sass::Prelexer::relinebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...
CVE-2017-11608
There is a heap-based buffer over-read in the Sass::Prelexer::relinebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...