QwikSec

Security Database

CVE

CWE

Training

CVE-2018-19837

Published: Dec 4, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

In LibSass prior to 3.5.5, Sass::Eval::operator()(Sass::Binary_Expression*) inside eval.cpp allows attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, because of certain incorrect parsing of '%' as a modulo operator in parser.cpp.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/sass/libsass/issues/2659

x_refsource_MISC

https://github.com/sass/libsass/commit/210fdff7a65370c2ae24e022a2b35da8c423cc5f

x_refsource_MISC

openSUSE-SU-2019:1791

vendor-advisory

x_refsource_SUSE

openSUSE-SU-2019:1800

vendor-advisory

x_refsource_SUSE

openSUSE-SU-2019:1883

vendor-advisory

x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.