Yaml-cpp (Yaml-cpp Project) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2019-01-15. Vendor: Yaml-cpp Project.

CVEs of Yaml-cpp

• CVE-2019-6292 - CVSS 6.5 (medium), 2019-01-15: An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack…
• CVE-2019-6285 - CVSS 6.5 (medium), 2019-01-14: The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption…
• CVE-2018-20573 - CVSS 6.5 (medium), 2018-12-28: The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and…
• CVE-2018-20574 - CVSS 6.5 (medium), 2018-12-28: The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and…
• CVE-2017-11692 - CVSS 7.5 (high), 2017-07-30: The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion failure and…
• CVE-2017-5950 - CVSS 5.5 (medium), 2017-04-03: The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and…