Bug 1050148 – VUL-1: python3-libsass: Stack-overflow in the sassc of libsass library.

Bug 1050148 - (CVE-2017-11554) VUL-1: python3-libsass: Stack-overflow in the sassc of libsass library.

(CVE-2017-11554)
Summary:	VUL-1: python3-libsass: Stack-overflow in the sassc of libsass library.

Status:	RESOLVED FIXED

Classification:	Novell Products
Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Incidents
Version:	unspecified
Hardware:	Other openSUSE 42.2

Priority:	P4 - Low Severity: Minor
Target Milestone:	---
Assigned To:	Security Team bot
QA Contact:	Security Team bot

URL:	https://smash.suse.de/issue/189025/
Whiteboard:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2017-07-24 10:53 UTC by Johannes Segitz
Modified:	2017-11-07 07:36 UTC (History)
CC List:	2 users (show)

See Also:
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Reproducer (1.85 KB, application/octet-stream) 2017-07-24 10:53 UTC, Johannes Segitz	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Johannes Segitz 2017-07-24 10:53:59 UTC

Created attachment 733519 [details]
Reproducer

rh#1471780

There is a stack consumption vulnerability in the lex function in parser.hpp (as
used in sassc) in LibSass 3.4.5. A crafted input will lead to a remote denial of
service.

No maintainer for openSUSE

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1471780
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11554
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11554
https://github.com/sass/libsass/issues/2445

Comment 1 Cédric Bosdonnat 2017-10-27 12:18:37 UTC

Fixed in SR https://build.opensuse.org/request/show/537069

Comment 2 Andreas Stieger 2017-11-07 01:01:24 UTC

release for Leap, done

Comment 3 Swamp Workflow Management 2017-11-07 05:11:05 UTC

openSUSE-SU-2017:2939-1: An update that fixes 5 vulnerabilities is now available.

Category: security (moderate)
Bug References: 1050148,1050149,1050150,1050151,1050380
CVE References: CVE-2017-11554,CVE-2017-11555,CVE-2017-11556,CVE-2017-11605,CVE-2017-11608
Sources used:
openSUSE Leap 42.3 (src):    libsass-3.3.2-5.1
openSUSE Leap 42.2 (src):    libsass-3.3.2-2.3.1