CVE-2017-11692

The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion failure and application exit) via a '!2' string.

References

Affected packages

Git / github.com/jbeder/yaml-cpp

Affected ranges

Type

GIT

Repo

https://github.com/jbeder/yaml-cpp

Events

Introduced

Last affected

b57efe94e7d445713c29f863adb8c23438eaa217

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.5.3"
        }
    ]
}

Affected versions

release-0.*

release-0.2.0

release-0.2.1

release-0.2.2

release-0.2.3

release-0.2.4

release-0.2.5

release-0.2.6

release-0.3.0

release-0.5.0

release-0.5.1

release-0.5.2

release-0.5.3

yaml-cpp-0.*

yaml-cpp-0.5.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11692.json"