Lucene search
+L

2 matches found

CNVD
CNVD
added 2018/12/29 12:0 a.m.7 views

yaml-cpp denial of service vulnerability (CNVD-2019-03333)

yaml-cpp aka LibYaml-C++ is a C++ parser for use in YAML. A denial of service vulnerability exists in the 'SingleDocParser::HandleFlowMap' function in yaml-cpp version 0.6.2. A remote attacker can exploit this vulnerability to cause a denial of service stack consumption and application crash with...

6.5CVSS6.8AI score0.02536EPSS
SaveExploits2References1
Snyk
Snyk
added 2018/12/28 4:29 p.m.2 views

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. The SingleDocParser::HandleFlowMap function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file. Remediation Upgrade...

6.5CVSS6.5AI score0.02536EPSS
SaveExploits2References2
Rows per page
Query Builder