Vulnerabilities > Yaml CPP Project

DATE CVE VULNERABILITY TITLE RISK
2019-01-15 CVE-2019-6292 Uncontrolled Recursion vulnerability in Yaml-Cpp Project Yaml-Cpp 0.6.2
An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2.
network
low complexity
yaml-cpp-project CWE-674
6.5
2019-01-14 CVE-2019-6285 Uncontrolled Recursion vulnerability in Yaml-Cpp Project Yaml-Cpp 0.6.2
The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
network
low complexity
yaml-cpp-project CWE-674
6.5
2018-12-28 CVE-2018-20574 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Yaml-Cpp Project Yaml-Cpp 0.6.2
The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
network
low complexity
yaml-cpp-project CWE-119
6.5
2018-12-28 CVE-2018-20573 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Yaml-Cpp Project Yaml-Cpp 0.6.2
The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
network
low complexity
yaml-cpp-project CWE-119
6.5
2017-07-30 CVE-2017-11692 Reachable Assertion vulnerability in Yaml-Cpp Project Yaml-Cpp
The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion failure and application exit) via a '!2' string.
network
low complexity
yaml-cpp-project CWE-617
7.5
2017-04-03 CVE-2017-5950 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Yaml-Cpp Project Yaml-Cpp 0.5.3
The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
local
low complexity
yaml-cpp-project CWE-119
5.5