← voltar
CVE-2019-6286

CVE-2019-6286

EPSS 2.1%
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::parse_import(), a similar issue to CVE-2018-11693.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.htmlhttps://github.com/sass/libsass/issues/2815