Vulnerabilities > CVE-2008-3196 - Resource Management Errors vulnerability in Yacc

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
yacc
CWE-399
NVD
Published: 2008-07-16
Updated: 2024-11-21

Summary

skeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side, which allows context-dependent attackers to cause an out-of-bounds stack access when the yacc stack pointer points to the end of the stack.

Vulnerable Configurations

Part Description Count
Application
Yacc
1

Common Weakness Enumeration (CWE)

Statements

contributorMark J Cox
lastmodified2008-07-17
organizationRed Hat
statementRed Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-3196 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.

References