rpm package
suse/yaml-cpp&distro=SUSE Linux Enterprise Workstation Extension 12 SP5
pkg:rpm/suse/yaml-cpp&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-6292 | — | < 0.5.3-3.6.3 | 0.5.3-3.6.3 | Jan 15, 2019 | An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, Handle | ||
| CVE-2019-6285 | — | < 0.5.3-3.6.3 | 0.5.3-3.6.3 | Jan 14, 2019 | The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. | ||
| CVE-2018-20574 | — | < 0.5.3-3.6.3 | 0.5.3-3.6.3 | Dec 28, 2018 | The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. | ||
| CVE-2018-20573 | — | < 0.5.3-3.6.3 | 0.5.3-3.6.3 | Dec 28, 2018 | The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. |
- CVE-2019-6292Jan 15, 2019affected < 0.5.3-3.6.3fixed 0.5.3-3.6.3
An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, Handle
- CVE-2019-6285Jan 14, 2019affected < 0.5.3-3.6.3fixed 0.5.3-3.6.3
The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
- CVE-2018-20574Dec 28, 2018affected < 0.5.3-3.6.3fixed 0.5.3-3.6.3
The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
- CVE-2018-20573Dec 28, 2018affected < 0.5.3-3.6.3fixed 0.5.3-3.6.3
The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.