CVE-2022-43358
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-43358
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-43358.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-43358
- Aliases
- Related
- Published
- 2023-08-22T19:16:29Z
- Modified
- 2024-09-18T03:21:53.592237Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Stack overflow vulnerability in astselectors.cpp: in function Sass::ComplexSelector::hasplaceholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).
- References
Affected packages
Debian:11 / libsass
Package
- Name
- libsass
- Purl
- pkg:deb/debian/libsass?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
3.*
3.6.4+20201122-1
3.6.4+20210501-1
3.6.5-1
3.6.5+20210718-1
3.6.5+20211111-1
3.6.5+20211111-2
3.6.5+20211226-1~bpo11+1
3.6.5+20211226-1~bpo11+2
3.6.5+20211226-1
3.6.5+20211226-2
3.6.5+20220909-1
3.6.5+20220909-2
3.6.5+20220909-3
3.6.5+20220909-3+hurd.1
3.6.5+20231221-1
3.6.5+20231221-2
3.6.5+20231221-3
Debian:12 / libsass
Package
- Name
- libsass
- Purl
- pkg:deb/debian/libsass?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Debian:13 / libsass
Package
- Name
- libsass
- Purl
- pkg:deb/debian/libsass?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.6.5+20231221-2