The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++)
0.5.1 allows remote attackers to cause a denial of service (stack
consumption and application crash) via a crafted YAML file.
(CVE-2017-5950)
- https://bugs.mageia.org/show_bug.cgi?id=23695
-
- https://github.com/jbeder/yaml-cpp/pull/489
- https://www.cve.org/CVERecord?id=CVE-2017-5950
- 6/core/yaml-cpp-0.5.1-6.1.mga6
Get the latest Linux and open source security news straight to your inbox.