There is an illegal address access in ast.cpp of LibSass 3.4.5.

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• libsass libsass3.4.5

Other highest-scoring records for the same primary product.

• CVE-2017-12964There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cpp.
  31Monitor
• CVE-2017-11554There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5.
  31Monitor
• CVE-2017-11341There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5.
  31Monitor
• CVE-2017-10687In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp.
  31Monitor
• CVE-2017-12963There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack.
  30Monitor
• CVE-2017-12962There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, l
  30Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.