Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In LibSass prior to 3.5.5, Sass::Eval::operator()(Sass::Binary_Expression*) inside eval.cpp allows attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, because of certain incorrect parsing of '%' as a modulo operator in parser.cpp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LibSass 资源管理错误漏洞
Vulnerability Description
LibSass是一个开源的使用C语言编写的Sass（CSS扩展语言）解析器。 LibSass 3.5.5之前版本中的eval.cpp文件的‘Sass::Eval::operator()’函数存在安全漏洞，该漏洞源于程序没有正确的解析‘%’字符。攻击者可借助特制的sass文件利用该漏洞造成拒绝服务（栈损坏）。
CVSS Information
N/A
Vulnerability Type
N/A