Azure Linux 3.0 Security Update: libsass (CVE-2022-43358)

The version of libsass installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-43358 advisory. - Stack overflow vulnerability in astselectors.cpp: in function Sass::ComplexSelector::hasplaceholder in...

EUVD-2022-46397

Malicious code in bioql PyPI...

BIT-SASS-2022-43358

Stack overflow vulnerability in astselectors.cpp: in function Sass::ComplexSelector::hasplaceholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service DoS...

SUSE CVE-2022-43358

Stack overflow vulnerability in astselectors.cpp: in function Sass::ComplexSelector::hasplaceholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service DoS...

Denial Of Service (DoS)

libsass.so is vulnerable to Denial Of Service DoS. The vulnerability exists in ComplexSelector::hasplaceholder at astselectors.cpp due to a stack overflow which allows an attacker to cause an application crash...

AZL-43987 CVE-2022-43358 affecting package libsass 3.6.3-3

Stack overflow vulnerability in astselectors.cpp: in function Sass::ComplexSelector::hasplaceholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service DoS...

DEBIAN-CVE-2022-43358

Stack overflow vulnerability in astselectors.cpp: in function Sass::ComplexSelector::hasplaceholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service DoS...

CVE-2022-43358

Stack overflow vulnerability in astselectors.cpp: in function Sass::ComplexSelector::hasplaceholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service DoS...

UBUNTU-CVE-2022-43358

Stack overflow vulnerability in astselectors.cpp: in function Sass::ComplexSelector::hasplaceholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service DoS...

LibSass 缓冲区错误漏洞

LibSass is an open source Sass CSS Extension Language parser written in C. The parser is available in C and C++. A security vulnerability exists in LibSass version 3.6.5, which stems from a Denial of Service DoS vulnerability in ComplexSelector::hasplaceholder...

PT-2023-14195

Name of the Vulnerable Software and Affected Versions libsass version 3.6.5-8-g210218 Description The issue is a stack overflow vulnerability in the ast selectors.cpp file, specifically in the Sass::ComplexSelector::has placeholder function. This can be exploited by attackers to cause a denial of...

CVE-2022-43358

Stack overflow vulnerability in astselectors.cpp: in function Sass::ComplexSelector::hasplaceholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service DoS...

OSV-2021-508 Segv on unknown address in Sass::CompoundSelector::resolve_parent_refs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31832 Crash type: Segv on unknown address Crash state: Sass::CompoundSelector::resolveparentrefs Sass::ComplexSelector::resolveparentrefs Sass::SelectorList::resolveparentrefs...

PT-2021-28149

Name of the Vulnerable Software and Affected Versions: Sass affected versions not specified Description: The issue is related to a crash in the Sass software, specifically in the Sass::CompoundSelector::resolve parent refs, Sass::ComplexSelector::resolve parent refs, and Sass::SelectorList::resol...

OSV-2020-348 Heap-buffer-overflow in std::__1::vector<std::__1::vector<Sass::SharedImpl<Sass::ComplexSelector>, std::

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15893 Crash type: Heap-buffer-overflow READ 8 Crash state: std::1::vector, std:: Sass::ComplexSelector::resolveparentrefs Sass::SelectorList::resolveparentrefs...

PT-2020-22428

Name of the Vulnerable Software and Affected Versions Sass affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. Specifically, it occurs in the Sass::ComplexSelector::resolve parent refs function and Sass::Eval::operator. There is...

PT-2020-22265

Name of the Vulnerable Software and Affected Versions Sass affected versions not specified Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the resolve parent refs function in Sass::ComplexSelector and Sass::SelectorList. No...