DEBIAN-CVE-2018-19837

In LibSass prior to 3.5.5, Sass::Eval::operatorSass::BinaryExpression inside eval.cpp allows attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, because of certain incorrect parsing of '%' as a modulo operator in parser.cpp...

CVE-2018-19837

CVE-2018-19837 affects LibSass prior to 3.5.5, where Sass::Eval::operator() in eval.cpp can trigger a denial-of-service via stack consumption from parsing '%' as modulo in parser.cpp. Affected versions include.LibSass vulnerability details are corroborated by multiple advisories (e.g., openSUSE/l...