CVE-2017-11608
There is a heap-based buffer over-read in the Sass::Prelexer::re_linebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.
- Score
- CVSS 3.0 6.5 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2017-07-24
- Last modified
- 2024-09-16
- Weaknesses
- CWE-125
Affected products
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1474276
