In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass::Supports_Operator*) in eval.cpp may cause a Denial of Service (application crash) via a crafted sass input file.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libsass | Sass-lang | 3.5.5 (including) | 3.5.5 (including) |
| Libsass | Ubuntu | bionic | * |
| Libsass | Ubuntu | cosmic | * |
| Libsass | Ubuntu | disco | * |
| Libsass | Ubuntu | esm-apps/bionic | * |