CVE-2022-43357

Katalog CVE

CVSS 7.5 · High EPSS 1,5%

Kerentanan Out-of-bounds Write pada sass-lang libsass, sass-lang sassc. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.

Rincian

Terbit di NVD

22 Agustus 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/sass/libsass/issues/3177 exploit · issue tracking · advisory vendor
• https://drive.google.com/file/d/1aC5q3czen0atI91fuBIoCBFkS30_OSWX/ exploit · permissions required · advisory pihak ketiga
• https://github.com/sass/libsass product