Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-43358HistoryAug 22, 2023 - 7:16 p.m.
CVE-2022-43358
2023-08-2219:16:29
Debian Security Bug Tracker
security-tracker.debian.org
8
vulnerability
stack overflow
ast_selectors.cpp
libsass
dos
unix
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
36.4%
Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libsass | <= 3.6.5+20220909-1 | libsass_3.6.5+20220909-1_all.deb |
| Debian | 11 | all | libsass | <= 3.6.4+20201122-1 | libsass_3.6.4+20201122-1_all.deb |
| Debian | 999 | all | libsass | < 3.6.5+20231221-2 | libsass_3.6.5+20231221-2_all.deb |
| Debian | 13 | all | libsass | < 3.6.5+20231221-2 | libsass_3.6.5+20231221-2_all.deb |
Related
veracode
veracode
Denial Of Service (DoS)
2023-08-24 08:39:52
alpinelinux
alpinelinux
CVE-2022-43358
2023-08-22 19:16:29
prion
prion
Stack overflow
2023-08-22 19:16:00
nvd
nvd
CVE-2022-43358
2023-08-22 19:16:29
cve
cve
CVE-2022-43358
2023-08-22 19:16:29
ubuntucve
ubuntucve
CVE-2022-43358
2023-08-22 00:00:00
osv
osv
BIT-sass-2022-43358
2024-03-06 11:04:10
libsass-3_6_5-1-3.6.5-2.1 on GA media
2024-06-15 00:00:00
cvelist
cvelist
CVE-2022-43358
2023-08-22 00:00:00
nessus
nessus
openSUSE 15 Security Update : libsass (SUSE-SU-2023:4895-1)
2023-12-19 00:00:00
Amazon Linux 2 : libsass (ALASMATE-DESKTOP1.X-2024-004)
2024-01-09 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
36.4%
Related for DEBIANCVE:CVE-2022-43358