Vulnerabilities > CVE-2017-11692 - Reachable Assertion vulnerability in Yaml-Cpp Project Yaml-Cpp

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

low complexity

yaml-cpp-project

CWE-617

NVD

Published: 2017-07-30

Updated: 2020-07-27

Summary

The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion failure and application exit) via a '!2' string.

Vulnerable Configurations

Part	Description	Count
Application	Yaml-Cpp_Project Yaml CPP Project Yaml CPP 0.2.0 Yaml CPP Project Yaml CPP 0.2.1 Yaml CPP Project Yaml CPP 0.2.2 Yaml CPP Project Yaml CPP 0.2.3 Yaml CPP Project Yaml CPP 0.2.4 Yaml CPP Project Yaml CPP 0.2.5 Yaml CPP Project Yaml CPP 0.2.6 Yaml CPP Project Yaml CPP 0.2.7 Yaml CPP Project Yaml CPP 0.3.0 Yaml CPP Project Yaml CPP 0.5.0 Yaml CPP Project Yaml CPP 0.5.1 Yaml CPP Project Yaml CPP 0.5.2 Yaml CPP Project Yaml CPP 0.5.3	13

Common Weakness Enumeration (CWE)

CWE-617 - Reachable Assertion

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References