CVE-2019-6286

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...

Heap overflow

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthesescope in prelexer.hpp...

CVE-2019-6283

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthesescope in prelexer.hpp...

CVE-2019-6286

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...

CVE-2019-6284

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...

CVE-2019-6284

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...

Heap overflow

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...

CVE-2019-6283

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthesescope in prelexer.hpp...

CVE-2019-6286

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...

CVE-2019-6284

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...

CVE-2019-6286

Technical details (affected products/versions, root cause, exploit info, and fixes) for CVE-2019-6286 are not provided in the connected documents. The Initial Description notes a heap-based buffer over-read in LibSass 3.5.5 but contains no further specifics.

CVE-2019-6284

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...

CVE-2019-6283

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthesescope in prelexer.hpp...

CVE-2019-6286

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...

CVE-2019-6283

CVE-2019-6283: LibSass 3.5.5 contains a heap-based buffer over-read in Sass::Prelexer::parenthese_scope (prelexer.hpp). The initial description specifies this specific over-read, but no exploitation details or fixes are provided in the supplied documents.

CVE-2019-6284

CVE-2019-6284 : LibSass 3.5.5 has a heap-based buffer over-read in Sass::Prelexer::alternatives (prelexer.hpp). This is the root cause of a memory safety issue that can lead to a crash or memory corruption. Documented impact is a denial of service through crash/over-read; exploitation details or ...

CVE-2019-6286

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...

openSUSE Security Update : discount (openSUSE-2019-19)

This update for discount to version 2.2.4 fixes the following issues : Security issues fixed : - CVE-2018-11468: Fixed a heap-based buffer over-read in the mkdtrimline function from mkdio.c boo1094809 - CVE-2018-12495: Fixed a heap-based buffer over-read via a crafted file boo1098252 %NASLMINLEVE...

Security update for discount (moderate)

openSUSE Security Update: Security update for discount Announcement ID: openSUSE-SU-2019:0019-1 Rating: moderate References: 1094809 1098252 Cross-References: CVE-2018-11468 CVE-2018-12495 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 An update that fixes two...

openSUSE: Security Advisory for discount (openSUSE-SU-2019:0019-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...