Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wff4-h782-3qx9

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

EPSS

Процентиль: 71%
0.00682
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 7 лет назад

The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

CVSS3: 3.7
redhat
около 7 лет назад

The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

CVSS3: 6.5
nvd
около 7 лет назад

The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

CVSS3: 6.5
msrc
больше 5 лет назад

The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

CVSS3: 6.5
debian
около 7 лет назад

The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++ ...

EPSS

Процентиль: 71%
0.00682
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-119