CVE-2018-19838
04.12.2018, 09:29
In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENT_AST_OPERATORS expansion allow attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, as demonstrated by recursive calls involving clone(), cloneChildren(), and copy().Enginsight
Vendor | Product | Version |
---|---|---|
sass-lang | libsass | 𝑥 < 3.5.5 |
𝑥
= Vulnerable software versions

Debian Releases

Ubuntu Releases
References