high7.5
CVE-2017-11554
There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5.
Impact
There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5. A crafted input will lead to a remote denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libsass | Libsass | Version 3.4.5 |