UBUNTU-CVE-2019-6286

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...

PT-2019-18074

Name of the Vulnerable Software and Affected Versions LibSass version 3.5.5 Description A heap-based buffer over-read issue exists in the Sass::Prelexer::skip over scopes function, located in prelexer.hpp, which is called from Sass::Parser::parse import. This issue is similar to a previously...

DEBIAN-CVE-2018-11693

An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skipoverscopes which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service...

PT-2018-10753

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.5 Description An issue was discovered in the function Sass::Prelexer::skip over scopes, which could allow an attacker to disclose information or cause a denial of service due to an out-of-bounds read of a memory...