24 matches found
PT-2026-44448
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operatorSass::Supports Operator in eval.cpp may cause a Denial of Service application crash via a crafted sass input file...
PT-2026-44450
LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operatorSass::Binary Expression in eval.cpp...
Linux Distros Unpatched Vulnerability : CVE-2017-12963
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an illegal address access in Sass::Eval::operator in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to...
SUSE CVE-2018-19219
In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack...
SUSE CVE-2018-20190
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operatorSass::SupportsOperator in eval.cpp may cause a Denial of Service application crash via a crafted sass input file...
PT-2020-22428
Name of the Vulnerable Software and Affected Versions Sass affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. Specifically, it occurs in the Sass::ComplexSelector::resolve parent refs function and Sass::Eval::operator. There is...
CVE-2019-18797
LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operatorSass::BinaryExpression in eval.cpp...
CVE-2019-18797
LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operatorSass::BinaryExpression in eval.cpp...
CVE-2019-18797: Uncontrolled Recursion
LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operatorSass::BinaryExpression in eval.cpp...
PT-2019-15669
Name of the Vulnerable Software and Affected Versions LibSass version 3.6.1 Description The issue is related to uncontrolled recursion in the Sass::Eval::operator function, specifically when handling Sass::Binary Expression objects in the eval.cpp file. Recommendations For LibSass version 3.6.1, ...
CVE-2018-20190
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operatorSass::SupportsOperator in eval.cpp may cause a Denial of Service application crash via a crafted sass input file...
CVE-2018-20190: NULL Pointer Dereference
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operatorSass::SupportsOperator in eval.cpp may cause a Denial of Service application crash via a crafted sass input file...
PT-2018-15289
Name of the Vulnerable Software and Affected Versions LibSass version 3.5.5 Description The issue is related to a NULL Pointer Dereference in the function Sass::Eval::operatorSass::Supports Operator in eval.cpp. This may cause a Denial of Service, resulting in an application crash, when a crafted...
Unspecified Vulnerability in LibSass (CNVD-2019-40138)
LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'Sass::Eval::operator' function in LibSass version 3.5-stable. An attacker can exploit this vulnerability to cause a denial of service...
UBUNTU-CVE-2018-19219
In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack...
CVE-2018-19219: Improper Restriction of Operations within the Bounds of a Memory Buffer
In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack...
PT-2018-14872
Name of the Vulnerable Software and Affected Versions LibSass version 3.5-stable Description The issue is related to an illegal address access at Sass::Eval::operator, which can lead to a denial-of-service DoS attack. Recommendations For LibSass version 3.5-stable, at the moment, there is no...
UBUNTU-CVE-2017-12963
There is an illegal address access in Sass::Eval::operator in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's CVE-2017-11555 fix available from GitHub after 2017-07-24...
CVE-2017-12964
There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator in eval.cpp. It will lead to a remote denial of service attack...
CVE-2017-12963
There is an illegal address access in Sass::Eval::operator in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's CVE-2017-11555 fix available from GitHub after 2017-07-24...