Vendors / Libsass Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 9
Exploited now Libsass records in CISA KEV No Libsass vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 37
There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cpp.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01836 · Published 2017-08-18 · No fix listed CWE-674
Priority LOW 37
There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01879 · Published 2017-07-23 · No fix listed CWE-674
Priority LOW 37
There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01924 · Published 2017-07-16 · No fix listed CWE-125
Priority LOW 37
In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0197 · Published 2017-06-29 · No fix listed CWE-125
Priority LOW 36
There is an illegal address access in ast.cpp of LibSass 3.4.5.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01384 · Published 2017-07-16 · No fix listed CWE-20
Priority LOW 35
There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01225 · Published 2017-08-18 · No fix listed CWE-125
Priority LOW 35
There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, leading to a remote denial of service attack.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01225 · Published 2017-08-18 · No fix listed CWE-772
Priority LOW 35
There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01201 · Published 2017-07-23 · No fix listed CWE-674
Priority LOW 35
There is an illegal address access in the Eval::operator function in eval.cpp in LibSass 3.4.5.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01201 · Published 2017-07-23 · No fix listed CWE-20
Priority LOW 32
There is a heap based buffer over-read in LibSass 3.4.5, related to address 0xb4803ea1.
CVSS 3.0 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01457 · Published 2017-07-24 · No fix listed CWE-125
Priority LOW 31
There is a heap-based buffer over-read in the Sass::Prelexer::re_linebreak function in lexer.cpp in LibSass 3.4.5.
CVSS 3.0 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01145 · Published 2017-07-24 · No fix listed CWE-125
Open these records in search → All records by CVSS severity
0 9 2 0 0
THREATIST.IORead the docs