Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Abompard

#37561de 53,632
7.5CVSS total
Vulnerabilidades · 1
PT-2017-12098
7.5
2017-07-23
Sass · Libsass · CVE-2017-11554
**Name of the Vulnerable Software and Affected Versions** LibSass version 3.4.5 **Description** The issue is related to a stack consumption vulnerability in the `lex` function, located in `parser.hpp`, which is used in `sassc`. This vulnerability can be triggered by a crafted input, leading to a remote denial of service. **Recommendations** For LibSass version 3.4.5, consider updating to a newer version that contains a fix for this issue, as no specific workaround is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.