rpm package
suse/yaml-cpp&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP3
pkg:rpm/suse/yaml-cpp&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-6292 | Med | 6.5 | < 0.6.1-4.5.1 | 0.6.1-4.5.1 | Jan 15, 2019 | An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, Handle | |
| CVE-2019-6285 | Med | 6.5 | < 0.6.1-4.5.1 | 0.6.1-4.5.1 | Jan 14, 2019 | The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. | |
| CVE-2018-20574 | Med | 6.5 | < 0.6.1-4.5.1 | 0.6.1-4.5.1 | Dec 28, 2018 | The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. | |
| CVE-2018-20573 | Med | 6.5 | < 0.6.1-4.5.1 | 0.6.1-4.5.1 | Dec 28, 2018 | The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. |
- affected < 0.6.1-4.5.1fixed 0.6.1-4.5.1
An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, Handle
- affected < 0.6.1-4.5.1fixed 0.6.1-4.5.1
The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
- affected < 0.6.1-4.5.1fixed 0.6.1-4.5.1
The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
- affected < 0.6.1-4.5.1fixed 0.6.1-4.5.1
The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.