Yaml Cpp Project

yaml-cpp_project

6 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-6292 1Yaml Cpp Project 1Yaml Cpp Jun 17, 2026 Jan 15, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompa...Show more An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, HandleNode. Remote attackers could leverage this vulnerability to cause a denial-of-service via a cpp file.Show less
CVE-2019-6285 1Yaml Cpp Project 1Yaml Cpp Jun 17, 2026 Jan 14, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
CVE-2018-20574 1Yaml Cpp Project 1Yaml Cpp Nov 3, 2025 Dec 28, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
CVE-2018-20573 1Yaml Cpp Project 1Yaml Cpp Nov 3, 2025 Dec 28, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
CVE-2017-11692 1Yaml Cpp Project 1Yaml Cpp May 13, 2026 Jul 30, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion failure and application exit) via a '!2' string.
CVE-2017-5950 1Yaml Cpp Project 1Yaml Cpp May 13, 2026 Apr 3, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.