CVE-2018-20573

The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-12-28

Last modified

2025-11-03

Weaknesses

CWE-119

Affected products

• Yaml-cpp (Yaml-cpp Project)

References

• https://github.com/jbeder/yaml-cpp/issues/655
• http://seclists.org/fulldisclosure/2024/Nov/0