* The source files were matched to this source library based on a best effort match. Source libraries are selected from a list of probable public libraries.
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selector_append which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.
CVE-2018-11694 - High Severity Vulnerability
A Java based fault and performance management system
Library home page: https://sourceforge.net/projects/opennms/
Found in HEAD commit: 130d924635ac08f79df895672ac88544b22ca113
* The source files were matched to this source library based on a best effort match. Source libraries are selected from a list of probable public libraries.
- /ci2400-1-2020-Ejemplos-Clase/otros/docker/awesome-compose/react-express-mongodb/frontend/node_modules/node-sass/src/libsass/src/util.hpp - /ci2400-1-2020-Ejemplos-Clase/otros/docker/awesome-compose/react-express-mongodb/frontend/node_modules/node-sass/src/libsass/src/cssize.cpp - /ci2400-1-2020-Ejemplos-Clase/otros/docker/awesome-compose/react-express-mongodb/frontend/node_modules/node-sass/src/sass_context_wrapper.cpp - /ci2400-1-2020-Ejemplos-Clase/otros/docker/awesome-compose/react-express-mongodb/frontend/node_modules/node-sass/src/libsass/src/functions.cpp - /ci2400-1-2020-Ejemplos-Clase/otros/docker/awesome-compose/react-express-mongodb/frontend/node_modules/node-sass/src/libsass/src/expand.cpp - /ci2400-1-2020-Ejemplos-Clase/otros/docker/awesome-compose/react-express-mongodb/frontend/node_modules/node-sass/src/libsass/src/prelexer.cpp - /ci2400-1-2020-Ejemplos-Clase/otros/docker/awesome-compose/react-express-mongodb/frontend/node_modules/node-sass/src/callback_bridge.h - /ci2400-1-2020-Ejemplos-Clase/otros/docker/awesome-compose/react-express-mongodb/frontend/node_modules/node-sass/src/libsass/src/sass.cpp - /ci2400-1-2020-Ejemplos-Clase/otros/docker/awesome-compose/react-express-mongodb/frontend/node_modules/node-sass/src/sass_context_wrapper.h - /ci2400-1-2020-Ejemplos-Clase/otros/docker/awesome-compose/react-express-mongodb/frontend/node_modules/node-sass/src/libsass/src/parser.hpp - /ci2400-1-2020-Ejemplos-Clase/otros/docker/awesome-compose/react-express-mongodb/frontend/node_modules/node-sass/src/libsass/src/eval.cpp - /ci2400-1-2020-Ejemplos-Clase/otros/docker/awesome-compose/react-express-mongodb/frontend/node_modules/node-sass/src/libsass/src/debugger.hpp
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selector_append which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.
Publish Date: 2018-06-04
URL: CVE-2018-11694
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: High - Availability Impact: High
For more information on CVSS3 Scores, click here.Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11694
Release Date: 2018-06-04
Fix Resolution: LibSass - 3.6.0
Step up your Open Source Security Game with WhiteSource here