CVE-2018-20573

🗓️ 28 Dec 2018 16:00:00Reported by mitreType

The Scanner::EnsureTokensInQueue function in yaml-cpp 0.6.2 allows remote attackers to cause a denial of service via crafted YAML file

Reporter	Title	Published	Views	Family All 38
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access.	17 Jan 202415:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities found in open source code that is shipped with IBM Security Verify Access	6 Jul 202218:27	–	ibm
AstraLinux	Astra Linux - уязвимость в yaml-cpp	20 May 202605:53	–	astralinux
CBLMariner	CVE-2018-20573 affecting package yaml-cpp 0.6.2-6	9 Sep 202006:09	–	cbl_mariner
CBLMariner	CVE-2018-20573 affecting package yaml-cpp for versions less than 0.6.2-6	9 Apr 202206:51	–	cbl_mariner
CNVD	yaml-cpp denial of service vulnerability (CNVD-2019-03332)	29 Dec 201800:00	–	cnvd
Cvelist	CVE-2018-20573	28 Dec 201816:00	–	cvelist
Debian CVE	CVE-2018-20573	28 Dec 201816:00	–	debiancve
EUVD	EUVD-2018-13127	7 Oct 202500:30	–	euvd
Microsoft CVE	The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.	25 Sep 202007:00	–	mscve