{"id":"CVE-2022-43357","aliases":["ALPINE-CVE-2022-43357","AZL-43714","AZL-44079","BIT-sass-2022-43357","DEBIAN-CVE-2022-43357","EUVD-2022-46396","GHSA-j7vr-2gc9-mmv7","JLSEC-2026-664","OESA-2024-1018","OESA-2024-1049","SUSE-SU-2023:4895-1","UBUNTU-CVE-2022-43357","openSUSE-SU-2024:13516-1"],"status":"published","title":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector:...","description":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01517,"percentile":0.74886,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2023-08-22T00:00:00Z","modified":"2026-11-03T07:31:27Z","fixes":[{"ecosystem":"Alpine:v3.19","package":"libsass","fixed_in":["3.6.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libsass","fixed_in":["3.6.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libsass","fixed_in":["3.6.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libsass","fixed_in":["3.6.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libsass","fixed_in":["3.6.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libsass","fixed_in":["3.6.6-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libsass","fixed_in":["3.6.6-1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"sass","fixed_in":["3.6.5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libsass","fixed_in":["3.6.5+20231221-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libsass","fixed_in":["3.6.5+20231221-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.19","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.6.3-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"sass","ranges":[{"type":"SEMVER","events":[{"introduced":"3.6.5-8-g210218"},{"fixed":"3.6.5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.5+20220909-1","3.6.5+20220909-2","3.6.5+20220909-3","3.6.5+20220909-3+hurd.1","3.6.5+20231221-1","3.6.5+20231221-2","3.6.5+20231221-3"]},{"source":"osv","ecosystem":"Debian:13","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5+20231221-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5+20231221-2"}]}]},{"source":"osv","ecosystem":"Julia","package":"SassC_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-2.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-2.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-2.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-2.oe2203sp2"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-2.oe2203sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-2.oe2203sp2"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-2.oe2203sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-150200.4.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-150200.4.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-150200.4.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-150200.4.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.5-1","3.2.5-2","3.3.2-1","3.3.4-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4.3-1","3.4.6-1","3.4.8-1","3.4.8-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5.5-4","3.6.3-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.5-1ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-2.1"}]}],"bundled":3}],"products":[{"vendor":"sass-lang","product":"libsass"},{"vendor":"sass-lang","product":"sassc"}],"references":[{"url":"https://github.com/sass/libsass","tags":["x_transferred","Product","web","package"]},{"url":"https://drive.google.com/file/d/1aC5q3czen0atI91fuBIoCBFkS30_OSWX/","tags":["x_transferred","Exploit","Permissions Required","Third Party Advisory","advisory","web","report"]},{"url":"https://github.com/sass/libsass/issues/3177","tags":["x_transferred","Exploit","Issue Tracking","Vendor Advisory","advisory","report","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-43357","tags":["web","advisory"]},{"url":"https://drive.google.com/file/d/1aC5q3czen0atI91fuBIoCBFkS30_OSWX","tags":["web"]},{"url":"https://github.com/advisories/GHSA-j7vr-2gc9-mmv7","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-43357","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/43xxx/CVE-2022-43357.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-43357","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1018","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26592","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-43358","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1049","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234895-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214573","tags":["report"]},{"url":"https://bugzilla.suse.com/1214575","tags":["report"]},{"url":"https://bugzilla.suse.com/1214576","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-43357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-43358","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-43357","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-43357","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-43357","description":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2024-10-03T14:35:50.38Z","updated_at":"2026-11-02T14:34:25.618175Z"}],"euvd":[{"id":"EUVD-2022-46396","description":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2024-10-03T14:35:50Z","updated_at":"2026-11-03T00:27:54.233481Z"}],"ghsa":[{"id":"GHSA-j7vr-2gc9-mmv7","title":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector:...","description":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.","status":"published","published":"2023-08-22T21:30:26Z","modified":"2024-04-11T21:19:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:57:10.253701Z"}],"nvd":[{"id":"CVE-2022-43357","description":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.","status":"published","published":"2023-08-22T19:16:29.527Z","modified":"2026-06-17T05:06:21.56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:39.811118Z"}],"osv":[{"id":"ALPINE-CVE-2022-43357","description":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.","status":"published","published":"2023-08-22T19:16:29.527Z","modified":"2026-11-03T07:31:27.505428669Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"AZL-43714","title":"CVE-2022-43357 affecting package libsass 3.6.3-3","description":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.","status":"published","published":"2023-08-22T19:16:29Z","modified":"2026-04-21T04:31:07.217823Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44079","title":"CVE-2022-43357 affecting package libsass for versions less than 3.6.6-1","description":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.","status":"published","published":"2023-08-22T19:16:29Z","modified":"2026-04-21T04:47:25.628269Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"JLSEC-2026-664","title":"Stack overflow vulnerability in `ast_selectors.cpp` in function...","description":"Stack overflow vulnerability in `ast_selectors.cpp` in function `Sass::CompoundSelector::has_real_parent_ref` in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.","status":"published","published":"2026-07-13T17:46:15.921Z","modified":"2026-07-25T18:24:45.24745849Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2024-1018","title":"libsass security update","description":"Libsass is a Sass CSS precompiler which is ported for C/C++. This version is more efficient and portable than the original Ruby version. Keeping light and sample is its degisn philosophy which makes it more easier to be built and integrated with a immense amount of platforms and languages. Installation of saccs is needed if you want to run is directly as libsass is just a library.\r\n\r\nSecurity Fix(es):\r\n\r\nStack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.(CVE-2022-26592)\r\n\r\nStack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.(CVE-2022-43357)\r\n\r\nStack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).(CVE-2022-43358)","status":"published","published":"2024-01-05T11:06:28Z","modified":"2026-08-18T01:18:12.289603946Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1049","title":"libsass security update","description":"Libsass is a Sass CSS precompiler which is ported for C/C++. This version is more efficient and portable than the original Ruby version. Keeping light and sample is its degisn philosophy which makes it more easier to be built and integrated with a immense amount of platforms and languages. Installation of saccs is needed if you want to run is directly as libsass is just a library.\r\n\r\nSecurity Fix(es):\r\n\r\nStack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.(CVE-2022-26592)\r\n\r\nStack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.(CVE-2022-43357)\r\n\r\nStack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).(CVE-2022-43358)","status":"published","published":"2024-01-12T11:06:29Z","modified":"2026-08-18T01:18:12.404388407Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"UBUNTU-CVE-2022-43357","description":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.","status":"published","published":"2023-08-22T19:16:00Z","modified":"2026-04-22T13:30:01.745096Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:56.473586Z"},{"id":"BIT-sass-2022-43357","description":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.","status":"published","published":"2024-03-06T11:04:20.697Z","modified":"2026-09-08T08:48:19.478588607Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"CVE-2022-43357","description":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2026-10-28T02:31:03.850649878Z","updated_at":"2026-11-02T15:44:27.186787Z"},{"id":"DEBIAN-CVE-2022-43357","description":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.","status":"published","published":"2023-08-22T19:16:29.527Z","modified":"2026-11-03T06:02:58.941658951Z","updated_at":"2026-11-03T06:43:19.563245Z"},{"id":"openSUSE-SU-2024:13516-1","title":"libsass-3_6_5-1-3.6.5-2.1 on GA media","description":"These are all security issues fixed in the libsass-3_6_5-1-3.6.5-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:31:26.745326Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2023:4895-1","title":"Security update for libsass","description":"This update for libsass fixes the following issues:\n\n- CVE-2022-26592: Fixed Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector:has_real_parent_ref function (bsc#1214576)\n- CVE-2022-43358: Fixed Stack overflow vulnerability in ast_selectors.cpp (bsc#1214575).\n- CVE-2022-43357: Fixed Stack overflow vulnerability in ast_selectors.cpp (bsc#1214573).\n","status":"published","published":"2023-12-18T17:04:19Z","modified":"2026-02-04T03:28:59.248115Z","updated_at":"2026-11-02T15:53:53.865042Z"}]}}