60 matches found
Denial Of Service (DoS)
libsass.so is vulnerable to Denial Of Service DoS. The vulnerability exists in CompoundSelector::hasrealparentref at astselectors.cpp due to a stack overflow which allows an attacker to cause an application crash...
Denial Of Service (DoS)
libsass.so is vulnerable to Denial Of Service DoS. The vulnerability exists in ComplexSelector::hasplaceholder at astselectors.cpp due to a stack overflow which allows an attacker to cause an application crash...
AZL-32226 CVE-2022-26592 affecting package reaper for versions less than 3.1.1-9
Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::hasrealparentref function...
UBUNTU-CVE-2022-43357
Stack overflow vulnerability in astselectors.cpp in function Sass::CompoundSelector::hasrealparentref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service DoS. Also affects the command line driver for libsass, sassc 3.6.2...
SUSE CVE-2018-19827
In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp or SharedPtr.hpp that may cause a denial of service application crash or possibly have unspecified other impact...
CVE-2019-18799
LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parserselectors.cpp...
Denial Of Service (DoS)
libsass.so is vulnerable to denial of service DoS. The attack is due to incorrect parsing of % as a modulo operator in parser.cpp, accessing beyond the stack bounds when the attacker submits a malicious sass file to Sass::Eval::operatorSass::BinaryExpression inside eval.cpp...
CVE-2018-19219
In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack...
DEBIAN-CVE-2018-20822
LibSass 3.5.4 allows attackers to cause a denial-of-service uncontrolled recursion in Sass::ComplexSelector::perform in ast.hpp and Sass::Inspect::operator in inspect.cpp...
DEBIAN-CVE-2018-19838
In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENTASTOPERATORS expansion allow attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, as demonstrated by recursive calls involving clone, cloneChildren, and copy...
LibSass Denial of Service Vulnerability (CNVD-2019-06790)
LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'handleerror' function of the sasscontext.cpp file in LibSass versions prior to 3.5.5. An attacker can exploit this vulnerability to cause a denial of service with the help of ...
DEBIAN-CVE-2018-11695
An issue was discovered in LibSass 3.5.3. A NULL pointer dereference was found in the function Sass::Expand::operator which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...
CVE-2018-11697
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::exactly which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service...
CVE-2018-11696
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::operator which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...
CVE-2018-11693
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skipoverscopes which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service...
CVE-2018-11697
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::exactly which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service...
DEBIAN-CVE-2018-11499
A use-after-free vulnerability exists in handleerror in sasscontext.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service application crash or possibly unspecified other impact...
LibSass Denial of Service Vulnerability
LibSass is an open source written in C using Sass CSS extension language parser . A denial of service vulnerability exists in the 'Sass::Eval::operator' function in the eval.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability to cause a denial of service stack...
LibSass Heap Buffer Out-of-Bounds Read Vulnerability
LibSass is an open source written in C using Sass CSS extension language parser . A heap buffer out-of-bounds read vulnerability exists in the 'Sass::Prelexer::relinebreak' function of the lexer.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially...