In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::SelectorList::populateextends in SharedPtr.hpp (used by ast.cpp and ast_selectors.cpp) may cause a Denial of Service (application crash) via a crafted sass input file.
{ "binaries": [ { "binary_name": "libsass-dev", "binary_version": "3.4.8-1ubuntu0.1~esm1" }, { "binary_name": "libsass0", "binary_version": "3.4.8-1ubuntu0.1~esm1" }, { "binary_name": "libsass0-dbg", "binary_version": "3.4.8-1ubuntu0.1~esm1" } ], "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "libsass-dev", "binary_version": "3.6.3-1ubuntu1" }, { "binary_name": "libsass1", "binary_version": "3.6.3-1ubuntu1" }, { "binary_name": "libsass1-dbgsym", "binary_version": "3.6.3-1ubuntu1" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "libsass-dev", "binary_version": "3.6.5-1ubuntu1" }, { "binary_name": "libsass1", "binary_version": "3.6.5-1ubuntu1" }, { "binary_name": "libsass1-dbgsym", "binary_version": "3.6.5-1ubuntu1" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "libsass-dev", "binary_version": "3.6.5+20231221-3" }, { "binary_name": "libsass1", "binary_version": "3.6.5+20231221-3" }, { "binary_name": "libsass1-dbgsym", "binary_version": "3.6.5+20231221-3" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "libsass-dev", "binary_version": "3.6.5+20231221-3" }, { "binary_name": "libsass1", "binary_version": "3.6.5+20231221-3" }, { "binary_name": "libsass1-dbgsym", "binary_version": "3.6.5+20231221-3" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "libsass-dev", "binary_version": "3.6.6-0ubuntu1" }, { "binary_name": "libsass1", "binary_version": "3.6.6-0ubuntu1" }, { "binary_name": "libsass1-dbgsym", "binary_version": "3.6.6-0ubuntu1" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }