Vulnerability Name:

CVE-2018-19839 (CCN-153723)

Assigned:2018-06-02
Published:2018-06-02
Updated:2019-07-23
Summary:In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file.
CVSS v3 Severity:6.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
5.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
3.3 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
2.9 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
1.7 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-125
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2018-19839

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2019:1791

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2019:1800

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2019:1883

Source: XF
Type: UNKNOWN
libsass-cve201819839-dos(153723)

Source: CCN
Type: libsass GIT Repository
AddressSanitizer: buffer-overflow (OOB read) against some invalid input (sass_context.cpp:81) #2657

Source: MISC
Type: Exploit, Third Party Advisory
https://github.com/sass/libsass/issues/2657

Source: MISC
Type: Patch, Third Party Advisory
https://github.com/sass/libsass/pull/2767

Source: CCN
Type: IBM Security Bulletin 6379558 (Netezza for Cloud Pak for Data)
OSS security Scan issues for Concerto installer.

Source: CCN
Type: IBM Security Bulletin 6382126 (Netezza for Cloud Pak for Data)
OSS scan fixes for Content pos

Source: CCN
Type: IBM Security Bulletin 6382128 (Netezza for Cloud Pak for Data)
Open Source Security issues for NPS console.

Source: CCN
Type: IBM Security Bulletin 6414343 (Security Verify Information Queue)
IBM Security Verify Information Queue uses a Node.js package with multiple vulnerabilities

Source: CCN
Type: IBM Security Bulletin 6575649 (Spectrum Discover)
Medium/low severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)

Source: CCN
Type: IBM Security Bulletin 6612791 (Cloud Pak System Software)
Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System.

Source: CCN
Type: IBM Security Bulletin 6967283 (QRadar User Behavior Analytics)
IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities

Source: CCN
Type: IBM Security Bulletin 6991585 (Edge Application Manager)
Open Source Dependency Vulnerability

Vulnerable Configuration:Configuration 1:
  • cpe:/a:sass-lang:libsass:*:*:*:*:*:*:*:* (Version < 3.5.5)

    • Configuration CCN 1:
  • cpe:/a:sass-lang:libsass:3.5.5:*:*:*:*:*:*:*
  • AND
  • cpe:/a:ibm:security_verify_information_queue:1.0.6:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:security_verify_information_queue:1.0.7:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:qradar_user_behavior_analytics:1.0.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:201819839
    V
    		CVE-2018-19839
    2022-06-30
    oval:org.opensuse.security:def:112823
    P
    		libsass-3_6_5-1-3.6.5-1.2 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:93436
    P
    		 (Moderate)
    2021-12-16
    oval:org.opensuse.security:def:106288
    P
    		libsass-3_6_5-1-3.6.5-1.2 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:62359
    P
    		yast2-buildtools-4.2.7-1.31 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:62360
    P
    		yast2-multipath-4.2.1-1.74 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:63041
    P
    		python3-tools-3.6.13-3.78.1 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:62383
    P
    		containerd-1.3.9-5.29.3 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:74294
    P
    		Security update for gupnp (Important)
    2021-06-24
    oval:org.opensuse.security:def:62839
    P
    		FastCGI-2.4.0-2.23 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:63179
    P
    		rsyslog-module-gssapi-8.33.1-1.30 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62560
    P
    		libkpathsea6-6.2.3-11.8.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63405
    P
    		apache-commons-fileupload-1.4-1.63 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:64228
    P
    		conntrack-tools on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:63972
    P
    		Security update for squid (Important)
    2020-12-01
    oval:org.opensuse.security:def:74168
    P
    		Security update for tomcat (Important)
    2020-12-01
    oval:org.opensuse.security:def:64074
    P
    		Security update for python3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:63732
    P
    		Security update for xrdp (Important)
    2020-12-01
    oval:org.opensuse.security:def:64116
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:63866
    P
    		Security update for webkit2gtk3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:100149
    P
    		Security update for libsass (Moderate)
    2019-08-14
    oval:org.opensuse.security:def:109918
    P
    		Security update for libsass (Moderate)
    2019-07-23
    oval:com.ubuntu.disco:def:2018198390000000
    V
    		CVE-2018-19839 on Ubuntu 19.04 (disco) - medium.
    2018-12-04
    oval:com.ubuntu.bionic:def:201819839000
    V
    		CVE-2018-19839 on Ubuntu 18.04 LTS (bionic) - medium.
    2018-12-04
    oval:com.ubuntu.bionic:def:2018198390000000
    V
    		CVE-2018-19839 on Ubuntu 18.04 LTS (bionic) - medium.
    2018-12-04
    oval:com.ubuntu.cosmic:def:201819839000
    V
    		CVE-2018-19839 on Ubuntu 18.10 (cosmic) - medium.
    2018-12-04
    oval:com.ubuntu.xenial:def:2018198390000000
    V
    		CVE-2018-19839 on Ubuntu 16.04 LTS (xenial) - medium.
    2018-12-04
    oval:com.ubuntu.xenial:def:201819839000
    V
    		CVE-2018-19839 on Ubuntu 16.04 LTS (xenial) - medium.
    2018-12-04
    oval:com.ubuntu.cosmic:def:2018198390000000
    V
    		CVE-2018-19839 on Ubuntu 18.10 (cosmic) - medium.
    2018-12-04
    BACK
    sass-lang libsass *
    sass-lang libsass 3.5.5
    ibm security verify information queue 1.0.6
    ibm security verify information queue 1.0.7
    ibm qradar user behavior analytics 1.0.0