Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0631-1

Опубликовано: 07 мар. 2018
Источник: suse-cvrf

Описание

Security update for yaml-cpp

This update for yaml-cpp fixes the following issues:

  • CVE-2017-5950: Stack overflow in SingleDocParser::HandleNode() function (bsc#1032144)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP2
libyaml-cpp0_5-0.5.3-3.3.2
SUSE Linux Enterprise Desktop 12 SP3
libyaml-cpp0_5-0.5.3-3.3.2
SUSE Linux Enterprise Workstation Extension 12 SP2
libyaml-cpp0_5-0.5.3-3.3.2
SUSE Linux Enterprise Workstation Extension 12 SP3
libyaml-cpp0_5-0.5.3-3.3.2

Ссылки

Описание

The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:libyaml-cpp0_5-0.5.3-3.3.2
SUSE Linux Enterprise Desktop 12 SP3:libyaml-cpp0_5-0.5.3-3.3.2
SUSE Linux Enterprise Workstation Extension 12 SP2:libyaml-cpp0_5-0.5.3-3.3.2
SUSE Linux Enterprise Workstation Extension 12 SP3:libyaml-cpp0_5-0.5.3-3.3.2
Ссылки