Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-43357

Опубликовано: 22 авг. 2023
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sass-lang:libsass:3.6.5-8-g210218:*:*:*:*:*:*:*
cpe:2.3:a:sass-lang:sassc:3.6.2:*:*:*:*:*:*:*

EPSS

Процентиль: 43%
0.00207
Низкий

7.5 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 2 лет назад

Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.

CVSS3: 7.5
msrc
11 месяцев назад

Описание отсутствует

CVSS3: 7.5
debian
больше 2 лет назад

Stack overflow vulnerability in ast_selectors.cpp in function Sass::Co ...

CVSS3: 7.5
github
больше 2 лет назад

Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.

suse-cvrf
около 2 лет назад

Security update for libsass

EPSS

Процентиль: 43%
0.00207
Низкий

7.5 High

CVSS3

Дефекты

CWE-787