697 matches found
CVE-2022-43357
Stack overflow vulnerability in astselectors.cpp in function Sass::CompoundSelector::hasrealparentref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service DoS. Also affects the command line driver for libsass, sassc 3.6.2...
CVE-2022-43358
Summary (CVE-2022-43358): The vulnerability affects libsass (example: libsass 3.6.5-8-g210218) with a stack overflow in ast_selectors.cpp (Sass::ComplexSelector::has_placeholder) that can lead to denial of service. Several connected advisories/applications reference this issue alongside related C...
LibSass 缓冲区错误漏洞
LibSass is an open source Sass CSS Extension Language parser written in C. It can be used for a variety of purposes, including parsing and analysis. A security vulnerability exists in LibSass version 3.6.5, which stems from a stack overflow vulnerability in the CompoundSelector::hasrealparentref...
CVE-2022-43358: Out-of-bounds Write
Stack overflow vulnerability in astselectors.cpp: in function Sass::ComplexSelector::hasplaceholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service DoS...
PT-2023-14195
Name of the Vulnerable Software and Affected Versions libsass version 3.6.5-8-g210218 Description The issue is a stack overflow vulnerability in the ast selectors.cpp file, specifically in the Sass::ComplexSelector::has placeholder function. This can be exploited by attackers to cause a denial of...
CVE-2022-26592
Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::hasrealparentref function...
CVE-2022-26592
CVE-2022-26592 affects libsass 3.6.5, with a Stack Overflow vulnerability in CompoundSelector::has_real_parent_ref that can lead to DoS or crash. Multiple connected advisories confirm libsass-related impacts and advise upgrading to a newer package version (e.g., libsass 3.6.6-1 or newer, dependin...
CVE-2022-43358
Stack overflow vulnerability in astselectors.cpp: in function Sass::ComplexSelector::hasplaceholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service DoS...
CVE-2022-26592
Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::hasrealparentref function...
CVE-2022-43357
CVE-2022-43357 is a stack overflow vulnerability in libsass:3.6.5-8-g210218 (Sass::CompoundSelector::has_real_parent_ref) that can lead to denial of service. The issue also affects the sassc 3.6.2 CLI. Multiple Nessus/debian/openSUSE/SUSE/SUSE-derived advisories confirm the same flaw. Remediation...
CBL Mariner 2.0 Security Update: reaper (CVE-2018-11694)
The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2018-11694 advisory. - An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function...
CVE-2018-11694
...
Security Bulletin: Open Source Dependency Vulnerability
Summary IBM Edge Application Manager 4.5 has resolved the vulnerability. Vulnerability Details CVEID:CVE-2019-6283 DESCRIPTION: LibSass is vulnerable to a denial of service, caused by a heap-based buffer over-read in Sass::Prelexer::parenthesescope in prelexer.hpp. By persuading a victim to open ...
SUSE CVE-2017-10687
In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...
SUSE CVE-2017-11341
There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...
SUSE CVE-2017-11342
There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...
SUSE CVE-2017-11555
There is an illegal address access in the Eval::operator function in eval.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service...
SUSE CVE-2017-11556
There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may lead to remote denial of service...