CVE-2017-5950

The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
References
Link Resource
https://github.com/jbeder/yaml-cpp/issues/459 Third Party Advisory
http://www.securityfocus.com/bid/97307 Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:yaml-cpp_project:yaml-cpp:0.5.3:*:*:*:*:*:*:*

Information

Published : 2017-04-02 22:59

Updated : 2017-04-10 18:14


NVD link : CVE-2017-5950

Mitre link : CVE-2017-5950


JSON object : View

CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Advertisement

dedicated server usa

Products Affected

yaml-cpp_project

  • yaml-cpp