LibSass 'lexer.hpp' heap buffer over-read vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A heap buffer out-of-bounds read vulnerability exists in the lexer.hpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a denial of service...

CVE-2017-11342: Improper Input Validation

There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11341: Out-of-bounds Read

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11341

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11342

There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11342

CVE-2017-11342 affects LibSass 3.4.5 due to an illegal address access in ast.cpp. A crafted input can cause a remote denial of service (attack vector: network, no authentication). CVSS v3 base score 7.5 (HIGH); impact limited to availability. No patch/remediation details are provided in the suppl...

CVE-2017-11342

There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11341

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11341

CVE-2017-11341 affects LibSass 3.4.5, with a heap-based buffer over-read in lexer.hpp. A crafted input can cause a remote denial of service. Connected documents confirm the same issue; no explicit remediation or fixed version is provided in the supplied materials.

PT-2017-11943

Name of the Vulnerable Software and Affected Versions LibSass version 3.4.5 Description The issue is related to an illegal address access in the ast.cpp file, which can be triggered by a crafted input. This can lead to a remote denial of service attack. Recommendations For LibSass version 3.4.5, ...

PT-2017-11942

Name of the Vulnerable Software and Affected Versions LibSass version 3.4.5 Description A heap-based buffer over-read issue exists in the lexer.hpp file of LibSass. This can be triggered by a crafted input, potentially leading to a remote denial of service attack. Recommendations For LibSass...

LibSass 'json_mkstream()' function heap buffer overflow vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A heap buffer overflow vulnerability exists in the 'jsonmkstream' function of the sasscontext.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability to cause a denial of service heap...

CVE-2017-10687

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

Heap overflow

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2017-10687

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

CVE-2017-10687

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

CVE-2017-10687

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

CVE-2017-10687

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

CVE-2017-10687

CVE-2017-10687 affects LibSass 3.4.5, where a heap-based buffer over-read in json_mkstream() (sass_context.cpp) can be triggered by crafted input, leading to remote denial of service. The context consistently describes this DoS impact without detailing a vendor patch in the provided documents. Th...

CVE-2017-10687

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...