LibSass Denial of Service Vulnerability (CNVD-2019-06789)

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in several functions of the ast.cpp file in LibSass versions prior to 3.5.5. An attacker can exploit this vulnerability to cause a denial of service stack corruption with the help of ...

LibSass Denial of Service Vulnerability (CNVD-2019-06788)

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'Sass::Eval::operator' function of the eval.cpp file in LibSass versions prior to 3.5.5, which stems from the program failing to properly parse the '%' character. The...

Unspecified Vulnerability in LibSass

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'Sass::Parser::parsecssvariablevaluetoken' function in LibSass version 3.5-stable. An attacker could exploit this vulnerability to cause a denial of service...

PT-2018-14871

Name of the Vulnerable Software and Affected Versions LibSass version 3.5-stable Description The issue is related to an illegal address access at the parse css variable value token function in the Sass::Parser module, which can lead to a denial-of-service DoS attack. Recommendations For LibSass...

CVE-2018-19218: Out-of-bounds Read

In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parsecssvariablevaluetoken that will lead to a DoS attack...

LibSass: stack overflow #6 in libsass

Feeding //0i: to ./sassc -s triggers this stack overflow. ==11380==ERROR: AddressSanitizer: stack-overflow on address 0x7fff1665bfa8 pc 0x000000584802 bp 0x7fff1665c810 sp 0x7fff1665bfb0 T0 0 0x584801 in asanmemcpy /home/geeknik/sassc/bin/sassc+0x584801 1 0x87a353 in char const...