Описание
In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp. A crafted input will lead to a remote denial of service attack.
Ссылки
- Issue Tracking
- Issue Tracking
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:libsass:libsass:3.4.5:*:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.01758
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-125
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 9 лет назад
In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp. A crafted input will lead to a remote denial of service attack.
CVSS3: 7.5
debian
около 9 лет назад
In LibSass 3.4.5, there is a heap-based buffer over-read in the functi ...
CVSS3: 7.5
github
около 4 лет назад
In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp. A crafted input will lead to a remote denial of service attack.
EPSS
Процентиль: 76%
0.01758
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-125