Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Abompard

#36808of 53,624
7.5Total CVSS
Vulnerabilities · 1
PT-2017-12098
7.5
2017-07-23
Sass · Libsass · CVE-2017-11554
**Name of the Vulnerable Software and Affected Versions** LibSass version 3.4.5 **Description** The issue is related to a stack consumption vulnerability in the `lex` function, located in `parser.hpp`, which is used in `sassc`. This vulnerability can be triggered by a crafted input, leading to a remote denial of service. **Recommendations** For LibSass version 3.4.5, consider updating to a newer version that contains a fix for this issue, as no specific workaround is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.