697 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-11698
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::handleerror which could be leveraged ...
Linux Distros Unpatched Vulnerability : CVE-2018-11693
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skipoverscopes which could ...
Linux Distros Unpatched Vulnerability : CVE-2018-19839
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-rea...
Linux Distros Unpatched Vulnerability : CVE-2018-19797
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::SelectorList::populateextends in SharedPtr.hpp used by ast.cpp and astselectors.cpp may cause...
Linux Distros Unpatched Vulnerability : CVE-2017-11556
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may lead to remote denial ...
Linux Distros Unpatched Vulnerability : CVE-2019-6286
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar...
Linux Distros Unpatched Vulnerability : CVE-2018-19838
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENTASTOPERATORS expansion allow attackers to cause a denial-of-service resulting from stack...
Linux Distros Unpatched Vulnerability : CVE-2018-11499
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability exists in handleerror in sasscontext.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of...
Linux Distros Unpatched Vulnerability : CVE-2019-6283
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthesescope in prelexer.hpp. CVE-2019-6283 Note that Nessus relies on the presence...
CVE-2022-43358 affecting package libsass for versions less than 3.6.6-1
CVE-2022-43358 affecting package libsass for versions less than 3.6.6-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-26592 affecting package libsass for versions less than 3.6.6-1
CVE-2022-26592 affecting package libsass for versions less than 3.6.6-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-43357 affecting package libsass for versions less than 3.6.6-1
CVE-2022-43357 affecting package libsass for versions less than 3.6.6-1. An upgraded version of the package is available that resolves this issue...
CBL Mariner 2.0 Security Update: libsass / reaper (CVE-2022-26592)
The version of libsass / reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-26592 advisory. - Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::hasrealparentref function...
Azure Linux 3.0 Security Update: libsass / reaper (CVE-2022-26592)
The version of libsass / reaper installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-26592 advisory. - Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::hasrealparentref function...
Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).
...
Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.
...
Linux Distros Unpatched Vulnerability : CVE-2022-43357
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack overflow vulnerability in astselectors.cpp in function Sass::CompoundSelector::hasrealparentref in libsass:3.6.5-8-g210218, which can be exploited by...
Linux Distros Unpatched Vulnerability : CVE-2022-26592
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::hasrealparentref function. CVE-2022-26592 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2018-19826
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop containing a Sass::Inspect::operatorSass::StringQuoted stack frame may cause ...
