SUSE CVE-2017-11554

There is a stack consumption vulnerability in the lex function in parser.hpp as used in sassc in LibSass 3.4.5. A crafted input will lead to a remote denial of service...

Malicious Package

Overview fontawesome-sassc is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

UBUNTU-CVE-2017-11554

There is a stack consumption vulnerability in the lex function in parser.hpp as used in sassc in LibSass 3.4.5. A crafted input will lead to a remote denial of service...

CVE-2017-11554

CVE-2017-11554 affects LibSass 3.4.5 (lex function in parser.hpp, as used by sassc). The vulnerability is a stack-consumption DoS triggered by crafted input, enabling remote denial of service. Multiple connected sources corroborate the issue and its impact. OpenSUSE/SUSE advisories and OSV/NVD en...

LibSass: stack overflow in libsass

By pasting @H into ./sassc -s, we're able to trigger this stack overflow. ==3470==ERROR: AddressSanitizer: stack-overflow on address 0x7ffe1b09ffc8 pc 0x00000059bc77 bp 0x7ffe1b0a0820 sp 0x7ffe1b09ffd0 T0 0 0x59bc76 in interceptormalloc /home/geeknik/sassc/bin/sassc+0x59bc76 1 0x7f842fedb2e7 in...