CVE-2018-11697: Out-of-bounds Read

An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::exactly which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service...

CVE-2018-11698: Out-of-bounds Read

An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::handleerror which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service...

CVE-2018-11693: Out-of-bounds Read

An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skipoverscopes which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service...

CVE-2018-11696: NULL Pointer Dereference

An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::operator which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...

PT-2018-10757

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.5 Description An issue was discovered in the function Sass::Prelexer::exactly that could allow an attacker to disclose information or cause a denial of service due to an out-of-bounds read of a memory region...

PT-2018-10758

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.5 Description An issue was discovered in LibSass where an out-of-bounds read of a memory region was found in the function Sass::handle error. This could be leveraged by an attacker to disclose information or...

PT-2018-10753

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.5 Description An issue was discovered in the function Sass::Prelexer::skip over scopes, which could allow an attacker to disclose information or cause a denial of service due to an out-of-bounds read of a memory...

PT-2018-10756

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.5 Description A NULL pointer dereference was found in the function Sass::Inspect::operator, which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other...

CVE-2018-11694: NULL Pointer Dereference

An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selectorappend which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...

PT-2018-10754

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.5 Description A NULL pointer dereference was found in the Sass::Functions::selector append function, which could be leveraged by an attacker to cause a denial of service application crash or possibly have...

CVE-2018-11695: NULL Pointer Dereference

An issue was discovered in LibSass 3.5.3. A NULL pointer dereference was found in the function Sass::Expand::operator which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...

PT-2018-10755

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.3 Description A NULL pointer dereference was found in the Sass::Expand::operator function, which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other...

LibSass Memory Misreference Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A memory misreference vulnerability exists in the 'handleerror' function in the sasscontext.cpp file in LibSass versions 3.4.x and 3.5.x through 3.5.4. An attacker could exploit this vulnerability to cause a denial ...

CVE-2018-11499

A use-after-free vulnerability exists in handleerror in sasscontext.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service application crash or possibly unspecified other impact...

CVE-2018-11499

A use-after-free vulnerability exists in handleerror in sasscontext.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service application crash or possibly unspecified other impact...

Design/Logic Flaw

A use-after-free vulnerability exists in handleerror in sasscontext.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service application crash or possibly unspecified other impact...

DEBIAN-CVE-2018-11499

A use-after-free vulnerability exists in handleerror in sasscontext.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service application crash or possibly unspecified other impact...

CVE-2018-11499

A use-after-free vulnerability exists in handleerror in sasscontext.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service application crash or possibly unspecified other impact...

CVE-2018-11499

A use-after-free vulnerability exists in handleerror in sasscontext.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service application crash or possibly unspecified other impact...

CVE-2018-11499

A use-after-free vulnerability exists in handleerror in sasscontext.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service application crash or possibly unspecified other impact...