UBUNTU-CVE-2017-11341

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

Heap overflow

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11341

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2017-11342

There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

LibSass ast.cpp File Remote Denial of Service Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the ast.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a denial of service...

LibSass 'lexer.hpp' heap buffer over-read vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A heap buffer out-of-bounds read vulnerability exists in the lexer.hpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a denial of service...

CVE-2017-11341

CVE-2017-11341 affects LibSass 3.4.5, with a heap-based buffer over-read in lexer.hpp. A crafted input can cause a remote denial of service. Connected documents confirm the same issue; no explicit remediation or fixed version is provided in the supplied materials.

CVE-2017-11341

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11342

CVE-2017-11342 affects LibSass 3.4.5 due to an illegal address access in ast.cpp. A crafted input can cause a remote denial of service (attack vector: network, no authentication). CVSS v3 base score 7.5 (HIGH); impact limited to availability. No patch/remediation details are provided in the suppl...

CVE-2017-11342

There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

LibSass 'json_mkstream()' function heap buffer overflow vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A heap buffer overflow vulnerability exists in the 'jsonmkstream' function of the sasscontext.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability to cause a denial of service heap...

CVE-2017-10687

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

CVE-2017-10687

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

Heap overflow

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

CVE-2017-10687

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2017-10687

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

CVE-2017-10687

CVE-2017-10687 affects LibSass 3.4.5, where a heap-based buffer over-read in json_mkstream() (sass_context.cpp) can be triggered by crafted input, leading to remote denial of service. The context consistently describes this DoS impact without detailing a vendor patch in the provided documents. Th...

CVE-2017-10687

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

LibSass: stack overflow #6 in libsass

Feeding //0i: to ./sassc -s triggers this stack overflow. ==11380==ERROR: AddressSanitizer: stack-overflow on address 0x7fff1665bfa8 pc 0x000000584802 bp 0x7fff1665c810 sp 0x7fff1665bfb0 T0 0 0x584801 in asanmemcpy /home/geeknik/sassc/bin/sassc+0x584801 1 0x87a353 in char const...

LibSass: heap-use-after-free in Sass::SharedPtr::incRefCount()

Feeding @Pif0,0::SharedImplSass::Expression /home/geeknik/libsass/src/memory/SharedPtr.hpp:141:23 3 0x9820a2 in Sass::Eval::operatorSass::FunctionCall /home/geeknik/libsass/src/eval.cpp:1018 4 0x951b36 in Sass::Eval::operatorSass::List /home/geeknik/libsass/src/eval.cpp:502:18 5 0x9a0042 in...