Libsass Vulnerabilidad

Cronología

Versión

3.4.5	11
3.5.5	8
3.5.4	6
3.5.0	5
3.5.1	5

Contramedidas

Official Fix	11
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	21

Explotabilidad

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	32

Vector de acceso

Not Defined	0
Physical	0
Local	0
Adjacent	3
Network	29

Autenticación

Not Defined	0
High	0
Low	3
None	29

La interacción del usuario

Not Defined	0
Required	17
None	15

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	15
≤7	15
≤8	1
≤9	1
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	15
≤7	15
≤8	1
≤9	1
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	12
≤6	12
≤7	5
≤8	1
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	18
≤8	11
≤9	2
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	13
<2k	18
<5k	1
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	30
<2k	2
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Versions (18): 3.0, 3.1, 3.2, 3.3, 3.4, 3.4.5, 3.5, 3.5-stable, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5, 3.6, 3.6.1, 3.6.2, 3.6.5, 3.6.5-8-g210218

Tipo de software: Programming Language Software

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2023-08-23	7.1	7.1	libsass has_real_parent_ref desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-26592
2023-08-23	5.5	5.5	LibSass ast_selectors.cpp has_placeholder desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-43358
2023-08-23	5.5	5.5	libsass/sassc ast_selectors.cpp has_real_parent_ref desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-43357
2019-11-06	5.4	5.3	LibSass parser_selectors.cpp parseCompoundSelector denegación de servicio	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2019-18799
2019-11-06	6.4	6.2	LibSass ast_sel_weave.cpp weaveParents divulgación de información	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2019-18798
2019-11-06	5.4	5.3	LibSass eval.cpp Binary_Expression*) denegación de servicio	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-18797
2019-04-23	5.4	5.4	LibSass ast.hpp perform denegación de servicio	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-20822
2019-04-23	5.4	5.4	LibSass Parser parser.cpp parse_css_variable_value denegación de servicio	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-20821
2019-01-14	6.4	6.4	LibSass prelexer.hpp skip_over_scopes divulgación de información	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-6286
2019-01-14	6.4	6.4	LibSass prelexer.hpp alternatives desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-6284

22 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 22 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you know our Splunk app?

Download it now for free!