CVE-2019-18798

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

CVE-2019-18798

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

CVE-2019-18798

LibSass before 3.6.3 contains a heap-based buffer over-read in Sass::weaveParents (ast_sel_weave.cpp). Public docs provided here confirm the affected component and the exact function, but do not include exploit details, affected versions beyond “before 3.6.3,” or remediation steps. No additional ...

CVE-2019-18799

CVE-2019-18799 concerns LibSass before 3.6.3, which allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector (parser_selectors.cpp). The description consistently states this is a NULL pointer dereference vulnerability that could be exploited to crash the application. Affected prod...

CVE-2019-18799

LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parserselectors.cpp...

CVE-2019-18799

LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parserselectors.cpp...

CVE-2019-18799

LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parserselectors.cpp...

PT-2019-15671

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.6.3 Description The issue allows a NULL pointer dereference in the Sass::Parser::parseCompoundSelector function, located in parser selectors.cpp. Recommendations For versions prior to 3.6.3, update to version 3.6.3 ...

CVE-2019-18797: Uncontrolled Recursion

LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operatorSass::BinaryExpression in eval.cpp...

PT-2019-15670

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.6.3 Description The issue allows a heap-based buffer over-read in the Sass::weaveParents function located in ast sel weave.cpp. Recommendations For versions prior to 3.6.3, update to version 3.6.3 or later to resolv...

CVE-2019-18798: Out-of-bounds Read

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

PT-2019-15669

Name of the Vulnerable Software and Affected Versions LibSass version 3.6.1 Description The issue is related to uncontrolled recursion in the Sass::Eval::operator function, specifically when handling Sass::Binary Expression objects in the eval.cpp file. Recommendations For LibSass version 3.6.1, ...

CVE-2019-18799: NULL Pointer Dereference

LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parserselectors.cpp...

libsass:data_context_fuzzer: Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::SharedImpl<Sass::ComplexSelector>, std::

Detailed Report: https://oss-fuzz.com/testcase?key=5721443934928896 Project: libsass Fuzzing Engine: libFuzzer Fuzz Target: datacontextfuzzer Job Type: libfuzzermsanlibsass Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::vector, std::...

OPENSUSE-SU-2019:1883-1 Security update for libsass

This update for libsass to version 3.6.1 fixes the following issues: Security issues fixed: - CVE-2019-6283: Fixed heap-buffer-overflow in Sass::Prelexer::parenthesescopechar const boo1121943. - CVE-2019-6284: Fixed heap-based buffer over-read exists in Sass:Prelexer:alternatives boo1121944. -...

Security update for libsass (moderate)

openSUSE Security Update: Security update for libsass Announcement ID: openSUSE-SU-2019:1883-1 Rating: moderate References: 1096894 1118301 1118346 1118348 1118349 1118351 1119789 1121943 1121944 1121945 1133200 1133201 Cross-References: CVE-2018-11499 CVE-2018-19797 CVE-2018-19827 CVE-2018-19837...

Denial Of Service (DoS)

libsass.so is vulnerable to denial of service DoS. The attack is due to incorrect parsing of % as a modulo operator in parser.cpp, accessing beyond the stack bounds when the attacker submits a malicious sass file to Sass::Eval::operatorSass::BinaryExpression inside eval.cpp...

OPENSUSE-SU-2019:1800-1 Security update for libsass

This update for libsass to version 3.6.1 fixes the following issues: Security issues fixed: - CVE-2019-6283: Fixed heap-buffer-overflow in Sass::Prelexer::parenthesescopechar const boo1121943. - CVE-2019-6284: Fixed heap-based buffer over-read exists in Sass:Prelexer:alternatives boo1121944. -...

openSUSE: Security Advisory for libsass (openSUSE-SU-2019:1791-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : libsass (openSUSE-2019-1791)

This update for libsass to version 3.6.1 fixes the following issues : Security issues fixed : - CVE-2019-6283: Fixed heap-buffer-overflow in Sass::Prelexer::parenthesescopechar const boo1121943. - CVE-2019-6284: Fixed heap-based buffer over-read exists in Sass:Prelexer:alternatives boo1121944. -...