CVE-2019-6285

The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

References

Affected packages

Git / github.com/jbeder/yaml-cpp

Affected ranges

Type

GIT

Repo

https://github.com/jbeder/yaml-cpp

Events

Introduced

Last affected

562aefc114938e388457e6a531ed7b54d9dc1b62

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.6.2"
        }
    ]
}

Affected versions

release-0.*

release-0.2.0

release-0.2.1

release-0.2.2

release-0.2.3

release-0.2.4

release-0.2.5

release-0.2.6

release-0.2.7

release-0.3.0

release-0.5.0

release-0.5.1

release-0.5.2

release-0.5.3

yaml-cpp-0.*

yaml-cpp-0.5.3

yaml-cpp-0.6.0

yaml-cpp-0.6.1

yaml-cpp-0.6.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-6285.json"