LibSass 缓冲区错误漏洞

LibSass is an open source Sass CSS Extension Language parser written in C. It can be used for a variety of purposes, including parsing and analysis. A security vulnerability exists in LibSass version 3.6.5, which stems from a stack overflow vulnerability in the CompoundSelector::hasrealparentref...

LibSass 缓冲区错误漏洞

LibSass is an open source Sass CSS Extension Language parser written in C. The parser is available in C and C++. A security vulnerability exists in LibSass version 3.6.5, which stems from a Denial of Service DoS vulnerability in ComplexSelector::hasplaceholder...

CVE-2022-43357

Stack overflow vulnerability in astselectors.cpp in function Sass::CompoundSelector::hasrealparentref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service DoS. Also affects the command line driver for libsass, sassc 3.6.2...

CVE-2022-26592

Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::hasrealparentref function...

CVE-2022-43358

Summary (CVE-2022-43358): The vulnerability affects libsass (example: libsass 3.6.5-8-g210218) with a stack overflow in ast_selectors.cpp (Sass::ComplexSelector::has_placeholder) that can lead to denial of service. Several connected advisories/applications reference this issue alongside related C...

LibSass 缓冲区错误漏洞

LibSass is an open source Sass CSS Extension Language parser written in C. It can be used for a variety of purposes, including parsing and analysis. A security vulnerability exists in LibSass version 3.6.5, which stems from a stack overflow vulnerability in astselectors.cpp in...

CVE-2022-43357

Stack overflow vulnerability in astselectors.cpp in function Sass::CompoundSelector::hasrealparentref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service DoS. Also affects the command line driver for libsass, sassc 3.6.2...

CVE-2022-43357

CVE-2022-43357 is a stack overflow vulnerability in libsass:3.6.5-8-g210218 (Sass::CompoundSelector::has_real_parent_ref) that can lead to denial of service. The issue also affects the sassc 3.6.2 CLI. Multiple Nessus/debian/openSUSE/SUSE/SUSE-derived advisories confirm the same flaw. Remediation...

CVE-2022-26592

Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::hasrealparentref function...

CBL Mariner 2.0 Security Update: reaper (CVE-2018-11694)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2018-11694 advisory. - An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function...

CVE-2018-11694

...

Security Bulletin: Open Source Dependency Vulnerability

Summary IBM Edge Application Manager 4.5 has resolved the vulnerability. Vulnerability Details CVEID:CVE-2019-6283 DESCRIPTION: LibSass is vulnerable to a denial of service, caused by a heap-based buffer over-read in Sass::Prelexer::parenthesescope in prelexer.hpp. By persuading a victim to open ...

SUSE CVE-2017-10687

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

SUSE CVE-2017-11341

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

SUSE CVE-2017-11342

There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

SUSE CVE-2017-11555

There is an illegal address access in the Eval::operator function in eval.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service...

SUSE CVE-2017-11556

There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may lead to remote denial of service...

SUSE CVE-2017-11605

There is a heap based buffer over-read in LibSass 3.4.5, related to address 0xb4803ea1. A crafted input will lead to a remote denial of service attack...

SUSE CVE-2017-11608

There is a heap-based buffer over-read in the Sass::Prelexer::relinebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

SUSE CVE-2017-12962

There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, leading to a remote denial of service attack...