sass-lang libsass vulnerabilities and exploits

(subscribe to this query)

5.8

CVSSv2

An issue exists in LibSass up to and including 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::exactly() which could be leveraged by an malicious user to disclose information or manipulated to read from unmapped memory causing a denial of...

Sass-lang Libsass

5.8

CVSSv2

An issue exists in LibSass up to and including 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::handle_error which could be leveraged by an malicious user to disclose information or manipulated to read from unmapped memory causing a denial of servic...

Sass-lang Libsass

4.3

CVSSv2

LibSass prior to 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in ast_sel_weave.cpp.

Sass-lang Libsass

4.3

CVSSv2

LibSass prior to 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parser_selectors.cpp.

Sass-lang Libsass

4.3

CVSSv2

LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator()(Sass::Binary_Expression*) in eval.cpp.

Sass-lang Libsass

4.3

CVSSv2

In LibSass before 3.5.5, functions inside ast.cpp for IMPLEMENT_AST_OPERATORS expansion allow malicious users to cause a denial-of-service resulting from stack consumption via a crafted sass file, as demonstrated by recursive calls involving clone(), cloneChildren(), and copy().

Sass-lang Libsass

5.8

CVSSv2

An issue exists in LibSass up to and including 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skip_over_scopes which could be leveraged by an malicious user to disclose information or manipulated to read from unmapped memory causing a de...

Sass-lang Libsass

6.8

CVSSv2

An issue exists in LibSass up to and including 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selector_append which could be leveraged by an malicious user to cause a denial of service (application crash) or possibly have unspecified other impact.

Sass-lang Libsass

6.8

CVSSv2

An issue exists in LibSass <3.5.3. A NULL pointer dereference was found in the function Sass::Expand::operator which could be leveraged by an malicious user to cause a denial of service (application crash) or possibly have unspecified other impact.

Sass-lang Libsass

4.3

CVSSv2

In LibSass before 3.5.5, Sass::Eval::operator()(Sass::Binary_Expression*) inside eval.cpp allows malicious users to cause a denial-of-service resulting from stack consumption via a crafted sass file, because of certain incorrect parsing of '%' as a modulo operator in pa...

Sass-lang Libsass

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook