CVE-2017-11554

There is a stack consumption vulnerability in the lex function in parser.hpp as used in sassc in LibSass 3.4.5. A crafted input will lead to a remote denial of service...

CVE-2017-11555

There is an illegal address access in the Eval::operator function in eval.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service...

CVE-2017-11554

CVE-2017-11554 affects LibSass 3.4.5 (lex function in parser.hpp, as used by sassc). The vulnerability is a stack-consumption DoS triggered by crafted input, enabling remote denial of service. Multiple connected sources corroborate the issue and its impact. OpenSUSE/SUSE advisories and OSV/NVD en...

CVE-2017-11556

There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may lead to remote denial of service...

PT-2017-12098

Name of the Vulnerable Software and Affected Versions LibSass version 3.4.5 Description The issue is related to a stack consumption vulnerability in the lex function, located in parser.hpp, which is used in sassc. This vulnerability can be triggered by a crafted input, leading to a remote denial ...

PT-2017-12100

Name of the Vulnerable Software and Affected Versions LibSass version 3.4.5 Description A stack consumption issue exists in the Parser::advanceToNextToken function in parser.cpp. This can be triggered by a crafted input, potentially leading to a remote denial of service. Recommendations For LibSa...

CVE-2017-11556: Uncontrolled Recursion

There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may lead to remote denial of service...

CVE-2017-11555: Improper Input Validation

There is an illegal address access in the Eval::operator function in eval.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service...

CVE-2017-11554: Uncontrolled Recursion

There is a stack consumption vulnerability in the lex function in parser.hpp as used in sassc in LibSass 3.4.5. A crafted input will lead to a remote denial of service...

PT-2017-12099

Name of the Vulnerable Software and Affected Versions LibSass version 3.4.5 Description The issue is related to an illegal address access in the Eval::operator function, located in eval.cpp. This can be triggered by a crafted input, resulting in a remote denial of service. Recommendations For...

CVE-2017-11341

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11342

There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11342

There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11341

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2017-11342

There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2017-11341

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11341

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11342

There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

Heap overflow

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

LibSass ast.cpp File Remote Denial of Service Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the ast.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a denial of service...