CVE-2017-11554

There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5

published July 23, 2017

CVSS
—
EPSS
2%
Percentile
79.1
In the wild
Unconfirmed
What it is

There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5. A crafted input will lead to a remote denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01879 · 79.1th percentile
Published
2017-07-23T03:00Z
EPSS history
Timeline
  • 23 JUL 03:00Z
    There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5
    cvelistv5