CVE-2017-12963

CVE-2017-12963 describes an illegal address access vulnerability within the Sass::Eval::operator() function in LibSass 3.4.5, leading to a remote denial of service (DoS) attack. This flaw is similar to CVE-2017-11555 but persists even after the vendor's attempted fix for the earlier vulnerability. With a CVSS score of 7.5 (High), this vulnerability can be exploited remotely with low attack complexity, requiring no user interaction or privileges, and its primary impact is a complete denial of service. The EPSS score is low, suggesting a minimal likelihood of exploitation in the wild. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal, indicating a lack of widespread attention.