PT-2019-18072 · Sass+2 · Libsass+2

E4Ck

·

Publicado

2019-01-14

·

Atualizado

2023-02-28

·

CVE-2019-6284

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions LibSass version 3.5.5
Description A heap-based buffer over-read exists in the Sass::Prelexer::alternatives function in prelexer.hpp.
Recommendations For LibSass version 3.5.5, consider updating to a newer version to mitigate the risk, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the Sass::Prelexer::alternatives function until a patch is available.

Exploit

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2019-6284
MGASA-2020-0049
OPENSUSE-SU-2019:1791-1
OPENSUSE-SU-2019:1800-1
OPENSUSE-SU-2019:1883-1
OPENSUSE-SU-2019_1791-1
OPENSUSE-SU-2024:10988-1
USN-4837-1

Produtos afetados

Libsass
Suse
Ubuntu