rpm package
suse/yaml-cpp&distro=SUSE Linux Enterprise Real Time 15 SP2
pkg:rpm/suse/yaml-cpp&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-6292 | — | < 0.6.1-4.5.1 | 0.6.1-4.5.1 | Jan 15, 2019 | An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, Handle | ||
| CVE-2019-6285 | — | < 0.6.1-4.5.1 | 0.6.1-4.5.1 | Jan 14, 2019 | The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. | ||
| CVE-2018-20574 | — | < 0.6.1-4.5.1 | 0.6.1-4.5.1 | Dec 28, 2018 | The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. | ||
| CVE-2018-20573 | — | < 0.6.1-4.5.1 | 0.6.1-4.5.1 | Dec 28, 2018 | The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. |
- CVE-2019-6292Jan 15, 2019affected < 0.6.1-4.5.1fixed 0.6.1-4.5.1
An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, Handle
- CVE-2019-6285Jan 14, 2019affected < 0.6.1-4.5.1fixed 0.6.1-4.5.1
The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
- CVE-2018-20574Dec 28, 2018affected < 0.6.1-4.5.1fixed 0.6.1-4.5.1
The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
- CVE-2018-20573Dec 28, 2018affected < 0.6.1-4.5.1fixed 0.6.1-4.5.1
The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.