Описание
In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | not-affected | 3.5.5-4 |
| disco | ignored | end of life |
| eoan | not-affected | 3.5.5-4 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | released | 3.4.8-1ubuntu0.1~esm1 |
| esm-apps/focal | not-affected | 3.5.5-4 |
| esm-apps/jammy | not-affected | 3.5.5-4 |
| esm-apps/noble | not-affected | 3.5.5-4 |
Показывать по
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file.
In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file.
In LibSass prior to 3.5.5, the function handle_error in sass_context.c ...
In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file.
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3