The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
References
Link | Resource |
---|---|
https://github.com/jbeder/yaml-cpp/issues/459 | Third Party Advisory |
http://www.securityfocus.com/bid/97307 | Third Party Advisory VDB Entry |
Configurations
Information
Published : 2017-04-02 22:59
Updated : 2017-04-10 18:14
NVD link : CVE-2017-5950
Mitre link : CVE-2017-5950
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
yaml-cpp_project
- yaml-cpp