Описание
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::parse_import(), a similar issue to CVE-2018-11693.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | not-affected | 3.5.5-4 |
| disco | ignored | end of life |
| eoan | not-affected | 3.5.5-4 |
| esm-apps/bionic | released | 3.4.8-1ubuntu0.1~esm1 |
| esm-apps/focal | not-affected | 3.5.5-4 |
| esm-apps/jammy | not-affected | 3.5.5-4 |
| esm-apps/noble | not-affected | 3.5.5-4 |
| esm-apps/xenial | needed |
Показывать по
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::parse_import(), a similar issue to CVE-2018-11693.
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::parse_import(), a similar issue to CVE-2018-11693.
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelex ...
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::parse_import(), a similar issue to CVE-2018-11693.
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3