Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-11499

Опубликовано: 26 мая 2018
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service (application crash) or possibly unspecified other impact.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:sass-lang:libsass:*:*:*:*:*:*:*:*
Версия от 3.4.0 (включая) до 3.5.4 (включая)

EPSS

Процентиль: 86%
0.03034
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 7 лет назад

A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service (application crash) or possibly unspecified other impact.

CVSS3: 9.8
debian
больше 7 лет назад

A use-after-free vulnerability exists in handle_error() in sass_contex ...

CVSS3: 9.8
github
больше 3 лет назад

A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service (application crash) or possibly unspecified other impact.

suse-cvrf
больше 6 лет назад

Security update for libsass

EPSS

Процентиль: 86%
0.03034
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-416