CVE-2017-11692

The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion failure and application exit) via a '!2' string.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-07-30

Last modified

2024-08-05

Weaknesses

CWE-617

Affected products

• Yaml-cpp (Yaml-cpp Project)

References

• https://github.com/jbeder/yaml-cpp/issues/519
• https://security.gentoo.org/glsa/202007-14