Summary
It was discovered that LibSass incorrectly handled certain specially crafted
sass file. An attacker could possibly use this issue to cause a denial of
service or other unspecified impact.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libsass | 3.4.8-1ubuntu0.1~esm1 |
Vulnerabilities 13
-
Unscored —
A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 th…
-
Unscored —
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sa…
-
Unscored —
An issue was discovered in LibSass <3.5.3. A NULL pointer dereference was found in the function Sass::Expand::operator …
-
Unscored —
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::o…
-
Unscored —
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sa…
-
Unscored —
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sa…
-
Unscored —
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List::populate_extends in SharedPtr.hpp (us…
-
Unscored —
In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that…
-
Unscored —
In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service …
-
Unscored —
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass::Supports_Operator*) in eval.c…
-
Unscored —
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp.
-
Unscored —
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp.
-
Unscored —
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called …
References
-
report
https://ubuntu.com/security/CVE-2018-11499
-
report
https://ubuntu.com/security/CVE-2018-11693
-
report
https://ubuntu.com/security/CVE-2018-11695
-
report
https://ubuntu.com/security/CVE-2018-11696
-
report
https://ubuntu.com/security/CVE-2018-11697
-
report
https://ubuntu.com/security/CVE-2018-11698
-
report
https://ubuntu.com/security/CVE-2018-19797
-
report
https://ubuntu.com/security/CVE-2018-19827
-
report
https://ubuntu.com/security/CVE-2018-19839
-
report
https://ubuntu.com/security/CVE-2018-20190
-
report
https://ubuntu.com/security/CVE-2019-6283
-
report
https://ubuntu.com/security/CVE-2019-6284
-
report
https://ubuntu.com/security/CVE-2019-6286