CVE-2022-43357: 
NixOS vulnerability analysis and mitigation

A stack overflow vulnerability was discovered in LibSass version 3.6.5-8-g210218, specifically in the astselectors.cpp file within the Sass::CompoundSelector::hasrealparentref function. The vulnerability also affects the command line driver for libsass, sassc version 3.6.2. This security issue was assigned CVE-2022-43357 and was initially reported on October 17, 2022 (CVE Details).

The vulnerability exists in the astselectors.cpp file, specifically in the Sass::CompoundSelector::hasrealparentref function. It has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue is classified as CWE-787 (Out-of-bounds Write) (NVD).

When exploited, this vulnerability can lead to a denial of service (DoS) condition through stack overflow. The attack can cause the application to crash, potentially affecting system availability (CVE Details).

The vulnerability has been fixed in version 3.6.5+20231221-3 of LibSass. Users are advised to upgrade to this version or later to mitigate the vulnerability. For systems where immediate upgrading is not possible, there are no documented workarounds (Debian Tracker).