CVE-2017-10687

In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp

published June 29, 2017

CVSS
—
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is

In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp. A crafted input will lead to a remote denial of service attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01970 · 80.2th percentile
Published
2017-06-29T23:00Z
EPSS history
Timeline
  • 29 JUN 23:00Z
    In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp
    cvelistv5