Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5cqh-5hxx-9w4g

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

There is a heap-based buffer over-read in the Sass::Prelexer::re_linebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.

There is a heap-based buffer over-read in the Sass::Prelexer::re_linebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.

EPSS

Процентиль: 77%
0.01021
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 8 лет назад

There is a heap-based buffer over-read in the Sass::Prelexer::re_linebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.

CVSS3: 6.5
nvd
больше 8 лет назад

There is a heap-based buffer over-read in the Sass::Prelexer::re_linebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.

CVSS3: 6.5
debian
больше 8 лет назад

There is a heap-based buffer over-read in the Sass::Prelexer::re_lineb ...

suse-cvrf
больше 8 лет назад

Security update for libsass

EPSS

Процентиль: 77%
0.01021
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-125