Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-5950

Опубликовано: 17 янв. 2017
Источник: redhat
CVSS3: 7.5
EPSS Низкий

Описание

The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)yaml-cppWill not fix
Red Hat OpenStack Platform 10 (Newton)yaml-cppWill not fix
Red Hat OpenStack Platform 11 (Ocata)yaml-cppWill not fix
Red Hat OpenStack Platform 8 (Liberty)yaml-cppWill not fix
Red Hat OpenStack Platform 9 (Mitaka)yaml-cppWill not fix
Red Hat Satellite 6yaml-cppWill not fix
Red Hat Software Collectionsrh-mongodb26-yaml-cppWill not fix
Red Hat Software Collectionsrh-mongodb30upg-yaml-cppWill not fix
Red Hat Software Collectionsrh-mongodb32-yaml-cppWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-674
https://bugzilla.redhat.com/show_bug.cgi?id=1439662yaml-cpp: Stack overflow in HandleNode()

EPSS

Процентиль: 73%
0.00776
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 9 лет назад

The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

CVSS3: 5.5
nvd
почти 9 лет назад

The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

CVSS3: 5.5
debian
почти 9 лет назад

The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) ...

suse-cvrf
почти 8 лет назад

Security update for yaml-cpp

CVSS3: 5.5
github
больше 3 лет назад

The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

EPSS

Процентиль: 73%
0.00776
Низкий

7.5 High

CVSS3