Description
There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=1470714
Related Vulnerabilities
CVE-2020-5243 Vulnerability in npm package uap-core
CVE-2023-30531 Vulnerability in maven package org.jenkins-ci.plugins:consul-kv-builder
CVE-2023-22461 Vulnerability in npm package @mattkrick/sanitize-svg
CVE-2023-38509 Vulnerability in maven package org.xwiki.platform:xwiki-platform-livetable-ui
CVE-2023-34615 Vulnerability in maven package net.pwall.json:jsonutil