Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-19826
HistoryDec 03, 2018 - 7:29 p.m.

Memory corruption

2018-12-0319:29:00
PRIOn knowledge base
www.prio-n.com
3

0.001 Low

EPSS

Percentile

40.9%

DISPUTED In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop (containing a Sass::Inspect::operator()(Sass::String_Quoted*) stack frame) may cause a Denial of Service via crafted sass input files with stray ‘&’ or ‘/’ characters. NOTE: Upstream comments indicate this issue is closed as “won’t fix” and “works as intended” by design.

CPENameOperatorVersion
libsasseq3.5.5

0.001 Low

EPSS

Percentile

40.9%