Known Vulnerabilities for products from Libsass
Listed below are 11 of the newest known vulnerabilities associated with the vendor "Libsass".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2017-12964 json | There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cpp. It ... | 7.5 - HIGH | 2017-08-18 | 2019-10-03 |
| CVE-2017-12963 json | There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of serv... | 7.5 - HIGH | 2017-08-18 | 2017-08-21 |
| CVE-2017-12962 json | There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesi... | 7.5 - HIGH | 2017-08-18 | 2019-10-03 |
| CVE-2017-11608 json | There is a heap-based buffer over-read in the Sass::Prelexer::re_linebreak function in lexer.cpp in LibSass 3.4.5. A crafted ... | Not Provided | 2017-07-24 | 2025-04-20 |
| CVE-2017-11605 json | There is a heap based buffer over-read in LibSass 3.4.5, related to address 0xb4803ea1. A crafted input will lead to a remote... | Not Provided | 2017-07-24 | 2025-04-20 |
| CVE-2017-11556 json | There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A craft... | Not Provided | 2017-07-23 | 2025-04-20 |
| CVE-2017-11555 json | There is an illegal address access in the Eval::operator function in eval.cpp in LibSass 3.4.5. A crafted input will lead to ... | Not Provided | 2017-07-23 | 2025-04-20 |
| CVE-2017-11554 json | There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5. A crafted i... | Not Provided | 2017-07-23 | 2025-04-20 |
| CVE-2017-11342 json | There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attac... | Not Provided | 2017-07-17 | 2025-04-20 |
| CVE-2017-11341 json | There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service... | Not Provided | 2017-07-17 | 2025-04-20 |
| CVE-2017-10687 json | In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp. A crafted input... | Not Provided | 2017-06-29 | 2025-04-20 |