145 matches found
Code injection
The SingleDocParser::HandleFlowMap function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds. The Scanner::EnsureTokensInQueue function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file. Remediation Upgrade yaml-cp...
CVE-2018-20574
The SingleDocParser::HandleFlowMap function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...
CVE-2018-20573
CVE-2018-20573 affects yaml-cpp (LibYaml-C++) 0.6.2. The vulnerability, in Scanner::EnsureTokensInQueue, allows remote attackers to cause denial of service via a crafted YAML file, consuming stack resources and crashing the application. Connected advisories indicate patches/revisions exist (e.g.,...
CVE-2018-20574
CVE-2018-20574 affects yaml-cpp (LibYaml-C++) 0.6.2, where the function SingleDocParser::HandleFlowMap can be abused by a crafted YAML file to trigger denial of service (stack consumption and application crash). Public documents corroborate this by listing CVE-2018-20574 in SUSE/openSUSE advisori...
CVE-2018-20574
The SingleDocParser::HandleFlowMap function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...
CVE-2018-20573
The Scanner::EnsureTokensInQueue function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...
PT-2018-15443
Name of the Vulnerable Software and Affected Versions yaml-cpp version 0.6.2 Description The issue allows remote attackers to cause a denial of service, resulting in stack consumption and application crash, via a crafted YAML file. This is due to a problem in the Scanner::EnsureTokensInQueue...
CVE-2018-20573: Improper Restriction of Operations within the Bounds of a Memory Buffer
The Scanner::EnsureTokensInQueue function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...
CVE-2018-20574: Improper Restriction of Operations within the Bounds of a Memory Buffer
The SingleDocParser::HandleFlowMap function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...
MGASA-2018-0471 Updated yaml-cpp packages fix security vulnerability
The SingleDocParser::HandleNode function in yaml-cpp aka LibYaml-C++ 0.5.1 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file. CVE-2017-5950...
Updated yaml-cpp packages fix security vulnerability
The SingleDocParser::HandleNode function in yaml-cpp aka LibYaml-C++ 0.5.1 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file. CVE-2017-5950...
Fedora Update for yaml-cpp FEDORA-2018-1758d97170
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for yaml-cpp FEDORA-2018-c2499e6025
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 28 Update: yaml-cpp-0.6.1-4.fc28
yaml-cpp is a YAML parser and emitter in C++ written around the YAML 1.2 sp ec...
Fedora 27 : yaml-cpp (2018-c2499e6025)
Security fix for CVE-2017-5950. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...
[SECURITY] Fedora 29 Update: yaml-cpp-0.6.1-4.fc29
yaml-cpp is a YAML parser and emitter in C++ written around the YAML 1.2 sp ec...
yaml-cpp denial of service vulnerability
yaml-cpp aka LibYaml-C++ is a C++ parser for use in YAML. A security vulnerability exists in the 'Token& Scanner::peek' function in the scanner.cpp file in yaml-cpp 0.5.3 and earlier. A remote attacker can exploit this vulnerability to cause a denial of service assertion failure and application...
SUSE SLED12 Security Update : yaml-cpp (SUSE-SU-2018:0631-1)
This update for yaml-cpp fixes the following issues : - CVE-2017-5950: Stack overflow in SingleDocParser::HandleNode function bsc1032144 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automaticall...