DEBIAN-CVE-2019-18797
- Source
- https://security-tracker.debian.org/tracker/CVE-2019-18797
- Import Source
- https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2019-18797.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2019-18797
- Upstream
- Published
- 2019-11-06T16:15:10.820Z
- Modified
- 2025-11-14T04:03:12.614032Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator()(Sass::Binary_Expression*) in eval.cpp.
- References
Affected packages
Debian:11 / libsass
Package
- Name
- libsass
- Purl
- pkg:deb/debian/libsass?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
3.*
3.6.4+20201122-1
3.6.4+20210501-1
3.6.5-1
3.6.5+20210718-1
3.6.5+20211111-1
3.6.5+20211111-2
3.6.5+20211226-1~bpo11+1
3.6.5+20211226-1~bpo11+2
3.6.5+20211226-1
3.6.5+20211226-2
3.6.5+20220909-1
3.6.5+20220909-2
3.6.5+20220909-3
3.6.5+20220909-3+hurd.1
3.6.5+20231221-1
3.6.5+20231221-2
3.6.5+20231221-3
Debian:12 / libsass
Package
- Name
- libsass
- Purl
- pkg:deb/debian/libsass?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Debian:13 / libsass
Package
- Name
- libsass
- Purl
- pkg:deb/debian/libsass?arch=source
Debian:14 / libsass
Package
- Name
- libsass
- Purl
- pkg:deb/debian/libsass?arch=source