CVE-2018-11695 - An issue was discovered in LibSass <3.5.3

Back Back to CVE browser

HIGH

An issue was discovered in LibSass <3.5.3

Published Jun 4, 2018

8.8

HIGH

CVSS 3.0

EPSS 1.65%

Description

An issue was discovered in LibSass <3.5.3. A NULL pointer dereference was found in the function Sass::Expand::operator which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (3)

https://github.com/sass/libsass/issues/2664
x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory
https://github.com/sass/libsass/pull/2631
x_refsource_MISC
https://github.com/sass/libsass/releases
x_refsource_MISC

Link	Providers	Tags
https://github.com/sass/libsass/issues/2664		x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory
https://github.com/sass/libsass/pull/2631		x_refsource_MISC
https://github.com/sass/libsass/releases		x_refsource_MISC

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 4, 2018

Updated Aug 5, 2024

Reserved Jun 4, 2018

Link CVE-2018-11695

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-11695

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-11695