CVE-2022-43357

Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exp...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami sass

[{"type":"SEMVER","events":[{"introduced":"3.6.5-8-g210218"},{"fixed":"3.6.5"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2022-43357 libsass

Références

advisory nvd.nist.gov
advisory github.com
package github.com
report github.com
web drive.google.com