Description
In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp. A crafted input will lead to a remote denial of service attack.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=1466411
Related Vulnerabilities
CVE-2019-12395 Vulnerability in maven package us.dynmap:dynmap
CVE-2023-5072 Vulnerability in maven package org.json:json
CVE-2019-5423 Vulnerability in npm package http-live-simulator
CVE-2018-19413 Vulnerability in maven package org.sonarsource.sonarqube:sonar-plugin-api
CVE-2022-33140 Vulnerability in maven package org.apache.nifi:nifi