CVE-2018-19838
EUVD-2018-1151304.12.2018, 09:29
In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENT_AST_OPERATORS expansion allow attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, as demonstrated by recursive calls involving clone(), cloneChildren(), and copy().Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| sass-lang | libsass | 𝑥 < 3.5.5 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References